{"report_id":"587aed62-6997-4a35-a5ef-f08713121836","version":6,"status":"done","tags":[],"date":"2025-10-23T21:23:02Z","url":{"schema":"http","addr":"www.gwcz87x.life/","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":0,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"www.gwcz87x.life/","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"title":"GET-X"},"submit":{"url":{"schema":"http","addr":"www.gwcz87x.life/","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":0,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-27T21:23:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"ssogtx01.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"ssogtx01.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.gwcz87x.life","ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-23T21:23:13.300749Z","last_seen":"2025-10-23T21:23:13.300749Z","alert_count":0,"request_count":179,"received_data":6307236,"sent_data":194303,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"gis-static.gtx-s3.pw","ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":0,"first_seen":"2025-08-09T06:39:48.635715Z","last_seen":"2025-10-20T13:00:55.419585Z","alert_count":0,"request_count":24,"received_data":697580,"sent_data":11853,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"getxavatars1.gtx-s3.pw","ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":0,"first_seen":"2025-08-09T06:39:48.642557Z","last_seen":"2025-10-20T13:00:55.3603Z","alert_count":0,"request_count":32,"received_data":6761881,"sent_data":16044,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-19T22:12:19.186805Z","alert_count":0,"request_count":3,"received_data":769758,"sent_data":1441,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-10-19T22:15:22.988011Z","alert_count":0,"request_count":2,"received_data":1652946,"sent_data":992,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-10-19T22:12:30.748133Z","alert_count":0,"request_count":3,"received_data":1532,"sent_data":2734,"comment":"","tags":null,"fingerprints":null},{"fqdn":"licensing.gaming-curacao.com","ip":{"addr":"104.20.27.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-09-13","domain_rank":5874765,"first_seen":"2019-05-08T08:27:38Z","last_seen":"2025-10-15T20:31:09.181967Z","alert_count":0,"request_count":1,"received_data":759,"sent_data":592,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:5.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"gwcz87x.life","ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":6422667,"first_seen":"2025-10-23T21:23:13.302255Z","last_seen":"2025-10-23T21:23:13.302255Z","alert_count":0,"request_count":24,"received_data":94945,"sent_data":12408,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"gx.webim.ru","ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"2006-09-29","domain_rank":0,"first_seen":"2024-01-26T10:34:55Z","last_seen":"2025-10-20T13:00:55.282192Z","alert_count":0,"request_count":15,"received_data":1902495,"sent_data":7027,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"us.i.posthog.com","ip":{"addr":"13.216.81.40","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2020-01-23","domain_rank":42193,"first_seen":"2024-02-22T12:48:36Z","last_seen":"2025-10-20T18:03:08.469639Z","alert_count":0,"request_count":4,"received_data":2479,"sent_data":2083,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ssogtx01.cc","ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2025-01-13","domain_rank":760426,"first_seen":"2025-03-26T02:25:04.976918Z","last_seen":"2025-10-20T13:00:55.382592Z","alert_count":2,"request_count":1,"received_data":407081,"sent_data":575,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"gs.jdwqqi.site","ip":{"addr":"91.215.43.62","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2022-07-06","domain_rank":0,"first_seen":"2023-10-27T17:21:41Z","last_seen":"2025-10-14T04:24:33.66877Z","alert_count":0,"request_count":1,"received_data":758,"sent_data":597,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/C2SIIdtl.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"bba40757951832c96963a81955901c44","sha1":"dd7946dab4bcfa3416e5a13e632eadded55d03fd","sha256":"54d88bf870b01094833c3073a1f5d95098dae90134083484ac1386419bbc7730","sha512":"fdd5c8150446fb5381af00a4f3fd8ccbb84232b1c07c08504091c42173d276eba8a769442926b6d94724a907a2e4733c3f0f36e1e279fe35a9bd78d78abe2e6a","ssdeep":"","tlshash":"96f099cab414de371683098e8023ba3512612d5c663032b096d382b248cb01de3adbad","size":642,"data":"","first_seen":"2025-10-23T21:23:43.915265Z","last_seen":"2025-10-23T21:23:43.915265Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/CFU304S8.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"65b0cca89e40818f39fdd7753db6d142","sha1":"24e169a25a2e5e795d2ba4918ad600ab939bc23a","sha256":"261a0d9b3884cb4797de2dd31290199dbcec4f295a6ca9ee2c3b48ab9d9651ce","sha512":"e4c57b7230da955929c01aa05a22c6039a4ab395d6480587e21169106ce56e84aa99238c37d03c5944a72a6c799d55cc072ee59b5e498caf41fd1f6e021b43be","ssdeep":"","tlshash":"53b092d6728a3ce12602b810a15b80b4a131e6240b8a47208026f08739724a48a52e38","size":120,"data":"","first_seen":"2024-12-07T17:14:43.577967Z","last_seen":"2026-07-25T00:01:50.12235Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/l9CMu1bs.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"086b3b6ec278b86c967a69be90e1a7c9","sha1":"d9de87b9904711358dc69dfa86cf31fb6ca84665","sha256":"84d56e1814b5895d34f0cfb0d6ed11b9a13f56aa8897ba5647d223a3d996f80c","sha512":"1a8bdf580b9ad2a51d33c33f2a06b6066200d2cf284eee9d68a839424ee77f5645eaeaf757c5c2b477161f1aa8ceb76cf76409f8d78347bc5eb9d75d68830a41","ssdeep":"","tlshash":"2c21dc0fd5009539416a8cf8e1696831a3b312eb03edd7b4c2ee5f754b91022c24eb6f","size":1412,"data":"","first_seen":"2025-10-23T21:23:43.905562Z","last_seen":"2025-10-23T21:23:43.905562Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/B_Mdq3qX.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"ceed729097ff6a2df780d14abc33fdae","sha1":"4eea4d6aea0683aad27ec3c6cffdddca21c63d4c","sha256":"c31a6e2e99e30b5435dc049fcfca948e1563ddc0780fc066fcbc7568761943ea","sha512":"ba36492e728822a371503f42e356faac4f81ea03c4e996e3b63f92daa1f34a9e300f29531376894415800ed3482e89a9fd020f212d127935cc670c0b683461aa","ssdeep":"","tlshash":"8e21687d4aec2dcc091cbc842ad8ad7c7514d2496181cc8638a6fed7f487d5adc48471","size":1111,"data":"","first_seen":"2025-10-23T21:23:43.842202Z","last_seen":"2025-10-23T21:23:43.842202Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DgboFdNy.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"816c4d1cb3424dab924ed6fb97b84ce0","sha1":"518fa4df6a73a91c30d24ee8cf35ed33ee49ad8b","sha256":"427dfa1d7fec9dc673022d08f5870adf87d22031200a945d3e5dbb2e59b2e4e6","sha512":"3ea555d824b911964e96764ff02307e1343e0d9d4f87799a4838d5aa049592c44f43f2c6ee1510561695646fb89ef7510d4ea1f53f370ba0281d89064e2da567","ssdeep":"","tlshash":"4e01bd8e247b65ec086577403cd84ca44ba1bfe5269351803e2c6cc08bd4c85b53903d","size":748,"data":"","first_seen":"2025-10-23T21:23:43.418941Z","last_seen":"2025-10-23T21:23:43.418941Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DlAUqK2U.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","size":91,"data":"","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-07-27T14:20:46.915264Z","times_seen":24751,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/BQfqbuLg.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6226e11a82377ecf98197e965bc6925","sha1":"594c695e946d834bad3e501076ab7aed3c21259b","sha256":"cfd236def67319db3f88f9983521c023daf2bfdd07fa8ef2b15ad05aa5c5d5f9","sha512":"3634ca88c51f4aec95177edb75a938e2d0d4797f6d1e60a95af1944dd9935b048bb019efdc5a5306be52aedd90f066c3ad39c12adc25c58d27a804f8468dfd5b","ssdeep":"","tlshash":"cc11fc5fbc91c83d42b519b8d1703422036665c626fce4e405ed4eb51aaa44b9959b03","size":1094,"data":"","first_seen":"2025-10-23T21:23:43.918796Z","last_seen":"2025-10-23T21:23:43.918796Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DPl3vcyW.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfe0f44dfa92af51e196e1502b538d1b","sha1":"811e92c105e0ee9e1dbe4fa22f846811039b9f53","sha256":"47b6231210b4f53f08c1c1bb4717ce71d63bdeb03b7c13e53c783e6c54ba0f8f","sha512":"09de5241d045f8b044a43c43f68299107e7de758c0361fcf0211c0b55ebdc075f5723d025c714e36bc8b9bdac6b1f81ba8db60296e0e415f1ee1150e5dd4d229","ssdeep":"1536:qUNhtJfsOYXoS1aX9cebZyN7DA2wkGgL+oh31xzSP6qL8TDhyKPkG/uHAj9eiy5X:qohtJfsOgbeM7pgK+oh310KRPj9OKgR","tlshash":"13d36f4b4e0c0e7a056213b12fada7b362acc07571dbc3e657bf82182375465aee275c","size":140119,"data":"","first_seen":"2025-10-23T21:23:43.99746Z","last_seen":"2025-10-23T21:23:43.99746Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DrBHzM4U.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"81dc95a0ae7621ff9376cdd187ab5139","sha1":"6110c5ab1569e7654b8c15a010c9fcedf58021f0","sha256":"cb5b291c7af986c91e97a23bca15fdbdd5f22e4e195d3f6f2e01c07ae0b9a4c3","sha512":"a6304116d77607a747e3e142e404e06808491894cd86aa56a3da4766f8e36bf47b0ab64938ed7bafb707d3fd2f5aaf53bc8f397be35d055d9a221473762786eb","ssdeep":"","tlshash":"cdf09e8e70a3d2b0b736d789c937d542e07c1e93390de5d1d44a5a45324b481e73d75e","size":512,"data":"","first_seen":"2025-10-23T21:23:43.001964Z","last_seen":"2025-10-23T21:23:43.001964Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/tPdbiW_V.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"af7805d42f0e94d87c24a603905aa544","sha1":"7b8e20de9b8033988fd4fb49ae5214be2a1b317e","sha256":"67962a43b72e5541bff19a54203273e73fa6a40aef2c34b20da51c95817d336f","sha512":"4f5b71fae1dbed1ca64d3290836d4ee5f28885ca526c71eaccbad91c58ee45a25d2a2e847846f68d8e02509d5c833f84c2e7a9928991b0418953cbe3dc954732","ssdeep":"","tlshash":"07c01285d8202077cc607828a1d20f42027e3644e115d17c77fc2482f470565a4aec65","size":192,"data":"","first_seen":"2024-05-07T05:56:57Z","last_seen":"2026-01-21T08:18:56.877435Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DciDYpZH.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e04267964b68eb70e66437b837ab36a2","sha1":"6dc1fb193384c8ab6d7f904682ffec5cbcdd53ba","sha256":"0394983d90cb0d3f196e2dbe6fda55b10eb96916273457ca0a387ee154b51b22","sha512":"e13ce273f1144f1976ac76a7955ac02640eec8e4c8a80304573dabee28c28b86b19468c863519294469f5b9c6475eee63e1c22fa5e88593d38f84bca3f1e8eb8","ssdeep":"","tlshash":"bf61c50df13598be71286cdae67b0347232239c33ef8c4a0a11e5d4bb704993c697721","size":3209,"data":"","first_seen":"2025-10-23T21:23:43.038912Z","last_seen":"2025-10-23T21:23:43.038912Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/C8r2xahW.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1425e58dbcb996f09a7066850e57676","sha1":"33b4019f748ec480a9f11f1b499abedca00018bb","sha256":"01e617222b759213e4dc338e2337ccfe113873ce7befe0cbe686a31b6efb88f1","sha512":"9e4e432a23c0571055b0552ef6484ce7144b021767e9c3109f93e80f0913e252d296c207b6107116dd9d9a345165b69cf0b13bf6b1f7bf37dc4dc01e829010b3","ssdeep":"192:xis9TeBXRAf7qprTRY6OoySwJWxb5Y3NgqlPMu8vc39f6leHNJUdGUnEen:x59yfRY6nySwJWxb5Y3NgqlPMu8vc39+","tlshash":"dd020415d4ff4caa637730e11c2d8c1134185b42df528d6398add406ffefa6c66863aa","size":8844,"data":"","first_seen":"2025-10-23T21:23:43.78286Z","last_seen":"2025-10-23T21:23:43.78286Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Fqb33JjP.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"f7ee77146715ddc5dcb203c8ac5bf158","sha1":"0861a36e16f5d8cd3994873071bec4e345978a9b","sha256":"715e1a3277a55e3d523436f8be5b9ff8090e8dad371002d9c6ca6491d248151c","sha512":"36c9ccfcf25ca222e6ab57aff1f8c216965f37eb27817b9da53d1cc50e9ab13c6b66c799768407a5c937db73499f617897f799b7dbb9bdb696cff52e7ab432c4","ssdeep":"","tlshash":"0a110e2bfa0a0b2663331c7a46a931e6cf650bcb2c7984c43c54df261237c83e5a6f44","size":1029,"data":"","first_seen":"2025-10-23T21:23:43.880984Z","last_seen":"2025-10-23T21:23:43.880984Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DFtZ4fYS.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"8bdbd6d5d35121cd3c33a24e21a9d55b","sha1":"9bcc4eb3a0c4aecded95bc230758d9dc988880b9","sha256":"dfbbafadc7eb81d0ee5b4e3a3c261742d6e9af3f3a080f8b42b39ec7dc174123","sha512":"df4884ab9fab95df5cc647697d408a807387d54b2f4184bc25cd08fc935313c649594b0677102164a562f9cd1b750ecd784d03b99dada11cc09b3c0ec1578e86","ssdeep":"","tlshash":"b0a0120a0450007d100818e8a70fb06985b0186713790a8000044e020b194de990dd00","size":86,"data":"","first_seen":"2025-10-23T21:23:43.026089Z","last_seen":"2025-10-23T21:23:43.026089Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d62472d3d34790a17c34d2a028aefce","sha1":"e483fe46e13d9eaf7fd385178c67d22124516b07","sha256":"8d09196a04129e6bc96f3ebf5c1eebfed8b89fc950a34160ef0dbe2224ae651f","sha512":"237ac60d8672873e175695314ab1035890cbd762844c6d0c5880477b5497bf092dcfe2fc8ee73576fc2753c92a513748af7c42aac7eba31b752719a4026dbdb8","ssdeep":"","tlshash":"a351b77dd0286a7f901529dc78063740448c9f6ea0ee2e14d4c6eb94ac563af2af166d","size":3045,"data":"","first_seen":"2025-10-23T21:23:43.999085Z","last_seen":"2025-10-23T21:23:43.999085Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/CFU304S8.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"65b0cca89e40818f39fdd7753db6d142","sha1":"24e169a25a2e5e795d2ba4918ad600ab939bc23a","sha256":"261a0d9b3884cb4797de2dd31290199dbcec4f295a6ca9ee2c3b48ab9d9651ce","sha512":"e4c57b7230da955929c01aa05a22c6039a4ab395d6480587e21169106ce56e84aa99238c37d03c5944a72a6c799d55cc072ee59b5e498caf41fd1f6e021b43be","ssdeep":"","tlshash":"53b092d6728a3ce12602b810a15b80b4a131e6240b8a47208026f08739724a48a52e38","size":120,"data":"","first_seen":"2024-12-07T17:14:43.577967Z","last_seen":"2026-07-25T00:01:50.12235Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/YlOf_41J.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"83388ada47134ebaeffd4a25667118dc","sha1":"18f9cd8c3b3f51aa4cf403ee743221cdb52e19d1","sha256":"80b87aa5ce86089b085374cb00f2faf87629d2b8afc37b7016a134010b73fc96","sha512":"4e86ff64f4d8591e36dec26587d65bb4bcb720dd6878029316c31f083b8faa28beb584579f18462317cb4b29dc2f10d2d43e7264d50b7172284cb6166484d11b","ssdeep":"","tlshash":"90f04c9fd461407c5045dce0e436c471627b64e36be9d370c1cf2b746360478d9992a7","size":638,"data":"","first_seen":"2025-10-23T21:23:43.082216Z","last_seen":"2025-10-23T21:23:43.082216Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/BQKeWjB0.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"36d4ae75de9e6c6555488a56b8737368","sha1":"1fb98c9e83211e9e57ab8300816f5e0adb20a13e","sha256":"38bb728c63b1f45cc5a4b46154c5e6ea75a31b125e55f7ad9bc439ba6d804130","sha512":"8ae4e2b8bda0128d90ddac74a307bd183969b216709e618789e8b1327d635c83b6026e740282737da8cd603c78ee4233a3887d0ac96cd3497600942a1086ca02","ssdeep":"","tlshash":"003122c9f298e4b7d0a7d7e88472902076e875fb3f98dad4824099715623096ba4ead0","size":1671,"data":"","first_seen":"2025-10-23T21:23:43.560445Z","last_seen":"2025-10-23T21:23:43.560445Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/B-__ut10.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"6a6d443967d5558ae994d773af1043ff","sha1":"112b074c2bcbcf1a16fe5a1f1819ac4b0381f957","sha256":"43c8654d763c571af6e6864ea07a0f342d7fdfdaa5e500a67bf815574c6b96a8","sha512":"ea4fc99a9133aeb49fae403dbefa264abe46e85ef73e5234a60c2bfd330c0e85b9f6f430452c6ada9e6d49e67c3c9ff8e84e0fa5a3b511804d70b3d21eac5089","ssdeep":"768:qXU8MMca080Hjkh5UyvucDYxhROs9SewPpUzSsLP20+6a7kHGQPLFODM:TI088a5bvuc0xys9SeSpU1Lu0+67mQhN","tlshash":"48e2c6cc7641b018a3a71176e1ef580fb37a2984980e8554a0aef5e43d7c4bd43abddd","size":33499,"data":"","first_seen":"2025-10-23T21:23:43.968949Z","last_seen":"2025-10-23T21:23:43.968949Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/ls-cdn.amplitude/analytics-browser-2.6.2-beta.0-min.js.gz","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a81d9804ed47201de5314a7110e680be","sha1":"df58e208599843e46894e9c2bbfdf2feb2a985a5","sha256":"59dd69f4230f7535182747c17235fe4526d34826a142498485779bfdb5d617f1","sha512":"2c15805effa726a40e1b3156d003df4b5f602ab4c1b09b8897ff759d143c0a33a5eb7cc90887b850b1f209ccb05b7be263935ad805ad86383f88947d777fdb42","ssdeep":"768:p6wmsZPARRFO/J6zZsideR53I+dte7I4GWyihZurBJ8:/msY4/JceR54+zeU4GWyaZudq","tlshash":"f35372c9f6cbf0250393a5b8907f140ab33e7e9d242d4428f626d9d53c6d6499233bb9","size":66596,"data":"","first_seen":"2025-03-26T18:10:08.318249Z","last_seen":"2026-06-26T20:23:29.909592Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Bmu-_7RT.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"399bb60440452544c57c7b0d7b2fb019","sha1":"49caf156d98e1f9500f7f58394096bb6d92c2520","sha256":"4bb8c18c68339e6e1ec3cb6deccfede1522847a36395267475d06cfef8d5e05e","sha512":"c2060832374ad849da4192f3ac5c83ec26fafb81b8ea65b1b015496cb3694ff43ff9bdf6ccf1998b579f730359d3fd0bd59522fdf4cfc839e5e0ebab637f7746","ssdeep":"","tlshash":"2b511f2a7eda50311a292830e0da51639006dad11d1dc721b9204eed7a66e528db6fef","size":2455,"data":"","first_seen":"2025-10-23T21:23:43.048953Z","last_seen":"2025-10-23T21:23:43.048953Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/ext/cdp-customer//v1/analytics-js/ajs-destination.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecdb24cdd6b5a3a4a7ba31895f79ca4b","sha1":"3284a1f3ba7aa68b324499a64bf32c8101701663","sha256":"ef949bb08ab368c25ce835e54a53b3eb842de7e868ff81ff99520ed16394637d","sha512":"e76cf7a6f407f484c5537258129ee7d29b765a14204c0cd4e1ee9ca3d9542ac01c5c0b0c557e704d8c69a1a12b29312b99ec0fd25608af07b3c79ea5a83d0492","ssdeep":"192:d61F3JpeOVXIhCBnMfJlUEpFX8nmuONy+2Yn:doF9TMsEzZuF+2Yn","tlshash":"5f1212ccf6c7f0055267bab5817b451ab33ebd1a244a4894f42bcdd5287c619a12bf38","size":9226,"data":"","first_seen":"2025-06-01T15:05:10.790294Z","last_seen":"2025-12-16T16:58:04.809767Z","times_seen":521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/agcVug81.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d864bed01126ed1f2174822591f40a71","sha1":"f3790e5db702bd43253daf9deb7ff28d023cfe06","sha256":"b601919898a0d5ee701542a271757d8d676227eac20cb0afa1ef29ccdc044fbf","sha512":"055126dafe925327425a6287ffee8aee4dece11e1e39d61e96ccc1d64d9bd7a162dcd86ca97564e7227a7c7ed74004bef8e7119b3fa239882243c45749e60abb","ssdeep":"","tlshash":"5921238e1694cff8624c9df84c76382452e04cfeb6fd98d7c14d196a1375029d46a357","size":1188,"data":"","first_seen":"2025-10-23T21:23:43.615222Z","last_seen":"2025-10-23T21:23:43.615222Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/B7zlPWJx.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"15a022b3e7ef015f0e8129ce203e9194","sha1":"6c101945aea286cb8da98ef252bfd3971e30a906","sha256":"8ae9a7f9ea400235a91ed1750f3b75f9c942fbd62ae790f69325ace5e56a5c39","sha512":"f334a385350e86fba39af4a36a3f41c8af556c5c444b1bbf31c914f46e98bd56f06ddfc648d02558f1ca72ace386f32676f44e3a21062dc79dce5b87f7d30bbd","ssdeep":"384:gXI2fR3nEQz82bNgBfBf3hkyu7cuVnMYPYzQ4GVbNTnZRRz97zn:x253EF2KdhkyFaYE4GVbNTZn97z","tlshash":"5462e71ef48e687e65b654c429d87d01b1282ed7d14048e3a4f5ce32264ac6cb76eaf8","size":14688,"data":"","first_seen":"2025-10-23T21:23:43.092492Z","last_seen":"2025-10-23T21:23:43.092492Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Razus-0y.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a41f0a93536181ab28b02f37731757eb","sha1":"60dd82451fa91f9c784158226779cfdd6c94d1d0","sha256":"ab433d16063a4b34933b2a525fbcfd0cb5b4a60f7c3ff04cfc49c80567caa782","sha512":"286501ac2ce88c4e6ad719f3674f51a085ece9f6411a8aa446994a2f04397586765e8dab308923b04e594ce0238f4317e49bbf8daefc7aa1065e4684b65b996b","ssdeep":"6144:fnSzjJLQT2m905wx1DQTXdFSW3bVSzA6MnIgqaTLwbvvosSDh6qJJ8LHIF9y:PWjpQ39ewx1cFSubV4mIgqaPsG8qJJ6","tlshash":"51a45bd97196b02253f619f4907b0106f3392a58384ec4e4f16daeea3d7680a91b7f7c","size":488942,"data":"","first_seen":"2025-10-23T21:23:43.118234Z","last_seen":"2025-10-23T21:23:43.118234Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/8gjymX2c.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"9ea452fd7ca8f740340f5037394b8648","sha1":"ba3ec376e700985891799f79a26d1f9454630c2b","sha256":"5e9d220e027bdb3c09d97701d87934192c515d59c7a494662500c319b7af9b68","sha512":"f9142def794aa47a52c4297d6f21934e6a2947911fe7e1269c53d218f369653eb330911025b66ff7fee5ae124f6631cb4c7de69b73205a22804aa2abb677a936","ssdeep":"96:mq53hKMoKMj1j83LdeFp1f5HnPx1oRstVCBR4Ir8DtgjEby+EUECPRv5:x3BY1j83sFjvmQVCkIgPb/D","tlshash":"9eb196d4b0d9e0dbb7764fd1c036225260076ba57834e0d0f27aad73215be58a562b3f","size":5164,"data":"","first_seen":"2025-10-23T21:23:43.286682Z","last_seen":"2025-10-23T21:23:43.286682Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/l9CMu1bs.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"086b3b6ec278b86c967a69be90e1a7c9","sha1":"d9de87b9904711358dc69dfa86cf31fb6ca84665","sha256":"84d56e1814b5895d34f0cfb0d6ed11b9a13f56aa8897ba5647d223a3d996f80c","sha512":"1a8bdf580b9ad2a51d33c33f2a06b6066200d2cf284eee9d68a839424ee77f5645eaeaf757c5c2b477161f1aa8ceb76cf76409f8d78347bc5eb9d75d68830a41","ssdeep":"","tlshash":"2c21dc0fd5009539416a8cf8e1696831a3b312eb03edd7b4c2ee5f754b91022c24eb6f","size":1412,"data":"","first_seen":"2025-10-23T21:23:43.905562Z","last_seen":"2025-10-23T21:23:43.905562Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DJyngK5D.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"09f7bed55afc16a288abb07ee8b4d93c","sha1":"9b4762183025b609254d791c3b0dbc4f5e356d81","sha256":"7cdad479701ade61948dc83091312c222dc256792972c35cf5b3c740960dcc3b","sha512":"dd521a2c1fd79640bd81affab002c80f866f557a92b733c28b85f769d364df47dd7d2ee36d8803151a582b207e3f44ce20def05531be61d0b2eb72fdbe130117","ssdeep":"1536:fK6l28I8DZzkXhvPS5uLEiMAa73hBlxvHB+CIdzkVXiA6w+EV93mBE09:S6nCvPS5uZS8a9Q","tlshash":"b1832989f224b17782f75aca8376c20172a14984b809d4e4b0ed4d7b496e95c03afffc","size":86097,"data":"","first_seen":"2025-10-23T21:23:43.378835Z","last_seen":"2025-10-23T21:23:43.378835Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DFtZ4fYS.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"8bdbd6d5d35121cd3c33a24e21a9d55b","sha1":"9bcc4eb3a0c4aecded95bc230758d9dc988880b9","sha256":"dfbbafadc7eb81d0ee5b4e3a3c261742d6e9af3f3a080f8b42b39ec7dc174123","sha512":"df4884ab9fab95df5cc647697d408a807387d54b2f4184bc25cd08fc935313c649594b0677102164a562f9cd1b750ecd784d03b99dada11cc09b3c0ec1578e86","ssdeep":"","tlshash":"b0a0120a0450007d100818e8a70fb06985b0186713790a8000044e020b194de990dd00","size":86,"data":"","first_seen":"2025-10-23T21:23:43.026089Z","last_seen":"2025-10-23T21:23:43.026089Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/CC-JJjPk.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"28faa779be2eb7b8820b07d8364f1eea","sha1":"ee2d07668314c256c7c26c3531e2fe82ed511087","sha256":"9eefadf32e1a98480d9da65562ac10e5e51d51c52ee48180ce3db466a5e98c98","sha512":"d7e69e010e34f5575f658508b4cb97b9ebcc429045f3bd95211eb29a222a519a914b059ab8bb64cd800977d05770fb0fa2f1ca1845fe18f86cd920aac99c81d4","ssdeep":"1536:olSpUnKbSKnQuJnXHrxAOwTlWupr+iLxa1EzQ3WIO8zrSouwRp02DnkS459rS9pD:W4UnSQWuh+WHzIutcjGmf3xKs","tlshash":"50346caef38991fde11b8bd49047741431652ffea281c85282fc5d04272a8fc57ede6a","size":231271,"data":"","first_seen":"2025-10-23T21:23:43.016832Z","last_seen":"2025-10-23T21:23:43.016832Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/QPlbqdGQ.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a55c554504c1643a6c31ab0f50bfe22d","sha1":"a8b4443239001a4664886a96690c9da2c2af2fb4","sha256":"f4b3c012b753bc1dcb4069a484003db9ff2c34fc97100f207ab3f90aa6a38873","sha512":"56346f310c80f06b95d672a35ab36de34ad01ea8a7d9b43ebffcb1a6e3d19da06c538087255a4028f40d279817eaff56512a3907eb4e060e3743665c61bf191a","ssdeep":"1536:XqFEnkX103iWkiTlLFTm1N4un6NdaCjb9bNPUyXGl7Y3riZqrSPKP/PqwZ:XqFEnklWiWkiTlLRm1N4un6Nd3jb9bN9","tlshash":"a03319eef06ca5f8c17383d498995014b72d3ff96640409a92fc4e646f6c4b86fb8d68","size":51089,"data":"","first_seen":"2025-10-23T21:23:43.110797Z","last_seen":"2025-10-23T21:23:43.110797Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DZcUfp38.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c51e87849c20754df562b45e01b56245","sha1":"f2f0a0db376a635d5f03ca9849af12d11563f208","sha256":"67bcdf2479d4e04ee9ac5203aac7eb67599cee3d12a31c1431b396a249308c4c","sha512":"9d8c9e348c8fa0e371f6c70c3e4cff3a1ad2e089948584bc537403d090f3d48a3171e66f223681ac5cb2a2897cd3bc40659a411ffa55154d5a526d9b4c8a754c","ssdeep":"192:pEvaTF8zRB/x9G27KeY7kd1VCcqHRz8JV41+HoganNQR0VZFn2p:Qau79nYmVCPz8Jwo","tlshash":"98f1b7e5d952983cb8b719e018eeb10834292fba92c1cc5765f88c24de44df99a1e79c","size":7998,"data":"","first_seen":"2025-10-23T21:23:43.665227Z","last_seen":"2025-10-23T21:23:43.665227Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"243dcbbab1864ae304323accde3f63e0","sha1":"7ac807de29469c5e810042601c8a11bf3601b893","sha256":"43ebc8eaf80b1efe8dd36390371da196ac1ee2ce30e3210b583a7adf20335fda","sha512":"2d9905ef903fe79fb3c24a2c552599dfaab246622edd7dc9348fd4d593e0351166cbbf59d306849c6601839c6198884f1fc600ae9e0728ea7f26cc363c58343a","ssdeep":"","tlshash":"d8a011802022a8030aa8800c022bbb003a38abb0a280022082308208300a023280a388","size":77,"data":"","first_seen":"2025-10-04T05:11:03.69028Z","last_seen":"2026-02-04T12:10:15.553292Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/jkc4TBzu.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"fb35155dafd468808a3729d5b58c54d0","sha1":"32b2533d2d44f21fbd35b48bdf79c4d8ffd1128b","sha256":"d0a38a6a1eaa78a609a21602401fdd690922618c1eeb4ca76c736eea6c7a739b","sha512":"e84ffe3b324763a912c484d5a4103dc842b6e830ceb79eb24a185cc69101938986da371a59a5707e1e1a08f49daa7a41a0fac307526fb339ea1facdc11c4821b","ssdeep":"","tlshash":"b811afc070d4a87583b4498805dbaab1a429ca943de782c5d85e1e33227fd8cc57ab0a","size":874,"data":"","first_seen":"2025-10-23T21:23:43.807881Z","last_seen":"2025-10-23T21:23:43.807881Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/ext/cdp-customer//v1/analytics-js/646.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c83e6df6ffa3af6337495fadc058adf3","sha1":"1bb413dd66d4e85907de4414bb98fd17be6ae482","sha256":"d128bb0eda8faaee8ff9b04a261ad0e835dfe1631768aa39c1a54952261d5787","sha512":"7ed7358de7f6d30a0c529a75c1fe9b1e6e79b34f8753538873c0c517dd28c52e423abeb772c0be518d344f2f513f3ff1c7b5b511aa99645b7596f4edb7771749","ssdeep":"768:i4V72U1y21F6WiEyKS3K/70fjjtRBlWBqnNyV18u8/zo8NyB5CJ:i41yGviEy+0vtnNyV18u8/zMO","tlshash":"bbc2f94a316a393d83d351e7bd7a3006633b7555b849c041b2ade8872f294cf6273f9a","size":26551,"data":"","first_seen":"2025-09-25T08:21:12.740421Z","last_seen":"2025-11-07T14:36:24.349236Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Bv_l3iC_.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"469bedd6f31461305f960383ce235665","sha1":"b3c6fb07e649d4d2d7f89f17e2e79b50a36850c4","sha256":"ca9e945e726e35d1ee2399dfe2116007dbfcc06f944e64791600ab154018a3e0","sha512":"49abe6035b45a97e1295f8b1546d278089210f9630c82b2eaa2cc1f16398b4f2aca01aa141b2302fe787da20958e9a5d5ec1d2b3dd9a8e46217524f305bfa0cd","ssdeep":"","tlshash":"c84112e3932448e75862e4c538e35a305b5599e8e1fa2089bc3acec5725ea07fc38770","size":2327,"data":"","first_seen":"2025-10-23T21:23:43.902244Z","last_seen":"2025-10-23T21:23:43.902244Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/BQKeWjB0.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"36d4ae75de9e6c6555488a56b8737368","sha1":"1fb98c9e83211e9e57ab8300816f5e0adb20a13e","sha256":"38bb728c63b1f45cc5a4b46154c5e6ea75a31b125e55f7ad9bc439ba6d804130","sha512":"8ae4e2b8bda0128d90ddac74a307bd183969b216709e618789e8b1327d635c83b6026e740282737da8cd603c78ee4233a3887d0ac96cd3497600942a1086ca02","ssdeep":"","tlshash":"003122c9f298e4b7d0a7d7e88472902076e875fb3f98dad4824099715623096ba4ead0","size":1671,"data":"","first_seen":"2025-10-23T21:23:43.560445Z","last_seen":"2025-10-23T21:23:43.560445Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DPQ_XqHv.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a4a7f4727df52ec564d0ce81bcced9","sha1":"5b39a9fa811315ee0ceebb9ea16cb82a9f725d77","sha256":"8ba4fda800f64111d84006c0ac9640ac1b76bb828f258e94acf78f7876f88daa","sha512":"b2927eeb965963b31207b406f6b1ce2bc6845f7b1e61ed21265a5b87a4c87d5cdc1bae70ea00dfc0dd036fa85c90d7df598765a8af2e70bf6fe7f54233ac735b","ssdeep":"6144:cYuDKegAufVcvTgOg1mBRrUOuzLoHxq26pl5OaPydofbUCdxNtuGgSdI86:cYuDKegAufVcvTgOg1mBRrUOuzLoHxq6","tlshash":"5d247d320e5d1cbd1111a166de1cab1a38de81fe3e9b93e107796e6e35f10309ea931d","size":226209,"data":"","first_seen":"2025-10-23T21:23:43.444889Z","last_seen":"2025-10-23T21:23:43.444889Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/cryptojs-aes-format.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6bc38f77922eaa6f1b23716034b4a2e","sha1":"db781b1e30c4f2a1d63d47054f0903c463cf01ab","sha256":"9ca00bddae85e30d59672da0089ea5e132df97d75a92f42114fe1befbaeaf32d","sha512":"0ad7c00c1564d77f8463dfc81003c0d6cd6ada4e3d01094331f72847f17718e4a6b2c7a2a0bcbd96a1107bc6cb9bcb1721e7b2968ae4544595ab98d39bb30c82","ssdeep":"","tlshash":"163177407debb4c287e8e1d50435a044f67b7a0ab1558ef3aa5aa404ffedf3006326e4","size":1494,"data":"","first_seen":"2023-03-07T18:27:54Z","last_seen":"2026-07-26T09:44:04.955028Z","times_seen":716,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/C9s2rfPj.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"1ab8829226bdf84d9651be81a3efd961","sha1":"4dd97cb56c939d6a472b1e0a5a76f03184b4619b","sha256":"8ba116d4bcafe21d3de2af68bbb6b378b4dd161883394f01fbd883a9faa57690","sha512":"e9e88960da5d2ba57197cec58429a3fa70877b37e61b404fb90093e55fa6e77ae87bfa245417a48e0546b0e20be956340469f8dfa1ecbd08a0b7ce2358286cf4","ssdeep":"","tlshash":"0a31100c380960bb139613e0949e144ee218bd627a6bc4c5e2cc7d677e27599cc8efad","size":1539,"data":"","first_seen":"2025-10-23T21:23:43.45143Z","last_seen":"2025-10-23T21:23:43.45143Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/cryptojs-aes-format.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6bc38f77922eaa6f1b23716034b4a2e","sha1":"db781b1e30c4f2a1d63d47054f0903c463cf01ab","sha256":"9ca00bddae85e30d59672da0089ea5e132df97d75a92f42114fe1befbaeaf32d","sha512":"0ad7c00c1564d77f8463dfc81003c0d6cd6ada4e3d01094331f72847f17718e4a6b2c7a2a0bcbd96a1107bc6cb9bcb1721e7b2968ae4544595ab98d39bb30c82","ssdeep":"","tlshash":"163177407debb4c287e8e1d50435a044f67b7a0ab1558ef3aa5aa404ffedf3006326e4","size":1494,"data":"","first_seen":"2023-03-07T18:27:54Z","last_seen":"2026-07-26T09:44:04.955028Z","times_seen":716,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/BmraxXvh.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"88026a00966ccd09a8426d069248f323","sha1":"a0aa2ca00b95a22b880bea71b377663ffef35879","sha256":"32bd35f0d60ed26167d0953eae6dfbd36b8af8780d52c863feb36a377675bcde","sha512":"aff334be6c8bf7db24e7af6214b0cbc497c4be336ed9fe22c6e07bee07027aae685746b27478a561a13897ddb909835137351b61db05738659c2b27a70ce3ef4","ssdeep":"","tlshash":"2e6130fc1635a57226eb17bb43a20c9282764455f049b27010da8f0c552dc984bf7ffa","size":3347,"data":"","first_seen":"2025-10-23T21:23:43.065131Z","last_seen":"2025-10-23T21:23:43.065131Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DPQ_XqHv.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a4a7f4727df52ec564d0ce81bcced9","sha1":"5b39a9fa811315ee0ceebb9ea16cb82a9f725d77","sha256":"8ba4fda800f64111d84006c0ac9640ac1b76bb828f258e94acf78f7876f88daa","sha512":"b2927eeb965963b31207b406f6b1ce2bc6845f7b1e61ed21265a5b87a4c87d5cdc1bae70ea00dfc0dd036fa85c90d7df598765a8af2e70bf6fe7f54233ac735b","ssdeep":"6144:cYuDKegAufVcvTgOg1mBRrUOuzLoHxq26pl5OaPydofbUCdxNtuGgSdI86:cYuDKegAufVcvTgOg1mBRrUOuzLoHxq6","tlshash":"5d247d320e5d1cbd1111a166de1cab1a38de81fe3e9b93e107796e6e35f10309ea931d","size":226209,"data":"","first_seen":"2025-10-23T21:23:43.444889Z","last_seen":"2025-10-23T21:23:43.444889Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"243dcbbab1864ae304323accde3f63e0","sha1":"7ac807de29469c5e810042601c8a11bf3601b893","sha256":"43ebc8eaf80b1efe8dd36390371da196ac1ee2ce30e3210b583a7adf20335fda","sha512":"2d9905ef903fe79fb3c24a2c552599dfaab246622edd7dc9348fd4d593e0351166cbbf59d306849c6601839c6198884f1fc600ae9e0728ea7f26cc363c58343a","ssdeep":"","tlshash":"d8a011802022a8030aa8800c022bbb003a38abb0a280022082308208300a023280a388","size":77,"data":"","first_seen":"2025-10-04T05:11:03.69028Z","last_seen":"2026-02-04T12:10:15.553292Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/ls-cdn.amplitude/plugin-session-replay-browser-1.4.0-min.js.gz","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c19b1b5d91c8d683b1310562d9c4a225","sha1":"4d45dcac5c6a88e10052f4e356b2170c20413441","sha256":"bb5779145f1ebdcdee053876a4ed060174dda4656978972304c79ddd5f36dac4","sha512":"3a4e8d2e8f5d9a3b45c08ce99374c149a5b67d04d016edfe6259dfbbba948a049301c0cfa5f9bf334cb93b9b4a3558cffa725c166a943c90834c8d2237a1a21c","ssdeep":"1536:Ask/3qTBpVX0Ib6vhb2pJkuppl5METErM2jnpkDtoT1JaM18PIQunrr9gltn2BE/:IqBfX046vhb2pKMQt1Jawi697w","tlshash":"4ec329deb397b033539355a980bb0101b73a6a19300d4464f62ad9ea3c7d847a277fbd","size":126923,"data":"","first_seen":"2025-08-09T06:39:58.991299Z","last_seen":"2026-03-24T13:49:06.781634Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Chd1ThOZ.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"317a2201ef3851dba19e8b41380c8518","sha1":"69f8afc7452ae5bbffe308672417d74ea784cee0","sha256":"64cbae9ec71c97c3ca661b3a42c7f0de57972f702378830b7911e5a148b1cb0b","sha512":"4d8e02b904019b8bc965749301e7a14aa67543e54a8b2a19862be134620f94b55e7a2481c50590bf05fc5b7f6ce8e54746b77e238fa7b3a83fbaf81345be42c0","ssdeep":"","tlshash":"372130aebb3aa7bc7c245a5f42306f30f0132096ffb8945cb8d22126e3425a155640b8","size":1151,"data":"","first_seen":"2024-06-08T05:57:25Z","last_seen":"2026-05-26T01:50:53.816934Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/CkugmCkk.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"a5b8324d4b4e76437aac9547676fedc3","sha1":"fd41e6d8573edfd64180bf7abb948c313d274d5a","sha256":"3ba31b688b8676a9f655c6ee181875de967ecd024fc2356b163bee0e17c2931b","sha512":"4d591e9d947d8a323b47d221b436aeb7bbcc0cdcc8a27ac0151391c262da8c19090b00516d16b7d8c8cce59ec72f452d7b2bd784f1290aa42c1eb42c98aebfdd","ssdeep":"768:DqTY+itM+orCjJJy1ee3JP6r1KCcKlyUW7YC6u64tH/9:ubiJou3CP6YhcW","tlshash":"39f21a487be0bc34c29a30d7353e09057b726641586f6600e009c6b97fa96ca71bef7e","size":36459,"data":"","first_seen":"2025-10-23T21:23:43.953015Z","last_seen":"2025-10-23T21:23:43.953015Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DkfJfwvf.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3af1f54944626229bf82f3033d6c2bcd","sha1":"3310c82a2fb0a70e651ce9be06f9706b3027f1cc","sha256":"219da91711799dc0882e2813999550fb98089b5b7bcfb29150ffe359c32cfe26","sha512":"cc0185af192f46a5bed925a1fdfb6878563e3d05da7abda2eb99e1c4d10a9d3b57d14b435eb38206c1af1369830fa901982b4a33f35c7ff25dd1118846a8fd36","ssdeep":"96:6LNlTYiN7xRLwhaFoZYYHMaMTTJ7FqGeXytq6:6plTYM7Lw9ZYiMaMTTZFqrXGq6","tlshash":"ea917719b0445cf8dab187ced84108a159db9ebf9410e97173fa2f3027d5ca4e217729","size":4544,"data":"","first_seen":"2025-10-23T21:23:43.886749Z","last_seen":"2025-10-23T21:23:43.886749Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/js/fp2.min.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","size":34877,"data":"","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/yjFwyy9d.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"60567b3b407a58df12f8e745e33b9cfd","sha1":"4549a829818d68f0dbbf0ea5bca2e52291873c63","sha256":"29075600aa13f0683bc29f92ee81468b04021e89f44e393d524fa32bda9a018b","sha512":"39ffb96b3b8d509d32e63953f5037f58bc144ff4881cc5e48933ca56c014c0195ca607db8c41de0dbb860a5b84c53a08eeea53318fb7f801edf06590e6e818bb","ssdeep":"","tlshash":"94d0955d5033d1b45575056904db0d06d14754bd333063246066fb7467a84d28b4fd05","size":259,"data":"","first_seen":"2025-10-23T21:23:43.040548Z","last_seen":"2025-10-23T21:23:43.040548Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/8gjymX2c.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"9ea452fd7ca8f740340f5037394b8648","sha1":"ba3ec376e700985891799f79a26d1f9454630c2b","sha256":"5e9d220e027bdb3c09d97701d87934192c515d59c7a494662500c319b7af9b68","sha512":"f9142def794aa47a52c4297d6f21934e6a2947911fe7e1269c53d218f369653eb330911025b66ff7fee5ae124f6631cb4c7de69b73205a22804aa2abb677a936","ssdeep":"96:mq53hKMoKMj1j83LdeFp1f5HnPx1oRstVCBR4Ir8DtgjEby+EUECPRv5:x3BY1j83sFjvmQVCkIgPb/D","tlshash":"9eb196d4b0d9e0dbb7764fd1c036225260076ba57834e0d0f27aad73215be58a562b3f","size":5164,"data":"","first_seen":"2025-10-23T21:23:43.286682Z","last_seen":"2025-10-23T21:23:43.286682Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VRDLWS0SHC\u0026cx=c\u0026gtm=4e5am1h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"430709ceedf12ba29b30f0307b1d252a","sha1":"e9a7a649c3fb8bcc40cb45a16f8191cb611f7886","sha256":"fababc5a8c0fd6968e768de90093b9dc21a6cb01d997fcdef1b73d3193e0969d","sha512":"1e408444526098b172fc1c553ab3bd27f873e17392ac9117f37f3cb96fbd2ce7b52d9d687986daf4304502f5d8a73a5ef05d68e71f64d98dc66c56504636d114","ssdeep":"6144:AkyJBX1Q8429Z8nP57wr/s0s/+Kxxc20hYlGVOKlhDjkA:WJBli29Z8nP58DG/mYlsF","tlshash":"558418cd73d670669396e478503f018ba57b29a2f44cc895f18acce42e74a9a4277f3c","size":378480,"data":"","first_seen":"2025-10-23T21:23:43.00802Z","last_seen":"2025-10-23T21:23:43.00802Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Bhh7OxXO.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"137ce657e9eca223e00d0d16f44cd126","sha1":"b7cc6dd5fb5480e257e7b84b9ac6f4296e1a93a3","sha256":"1881716bd3a956c02e0e68153fd45d4a9431028a73ffc4cac22062dc67d27b1a","sha512":"00e5352ae596507a20001f485f0f3cb4e957373cabaab8da1801fa7066552d1926327fbb461655214d8382d516bcbb4f558501a8e1753b08215048b216a8c75c","ssdeep":"","tlshash":"6df0508b1caa18941dd51f7b9027b0a2737a556e01018085feb1e6c5a20b59ef32f530","size":513,"data":"","first_seen":"2025-10-23T21:23:43.896975Z","last_seen":"2025-10-23T21:23:43.896975Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/ui-resources.php?location=eng\u0026mode=desktop\u0026lang=en\u0026f2aa63e1\u0026callback=getWebimUIResourcesCallback","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e55356ce407a94b283b927d0d1891eb","sha1":"c4df278d2805228c19f206d3224ee208a74079c4","sha256":"3cbb11fae1c8c17d14bdcc229e66590f878aac68756f4a49ef63cffdaa8f0ca2","sha512":"127190fab5d96de44e4e5bdcc09de39d72965246b37ed42b40db9604baa1e80b27de9401fa7ac1ee3dd332522568b17e7d3d1b8ccc50139bdfe64e9050370321","ssdeep":"1536:QmHOcWqVj1g4iy5VkMj2KuRyME234CsF7s77bsasbsUs+sxseT5Ggr7uN+YaL5I4:hrSvyawQJ3gy5f9uZS44WkHD","tlshash":"24d4140feed21469be2bee6361f70651713d34a25590079cb26f34de2f85ce29322b64","size":609915,"data":"","first_seen":"2025-10-14T04:24:50.094418Z","last_seen":"2025-11-20T17:10:17.40148Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/D823X0Qk.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"ddc7cdf84b01ca62629198aeecda0b79","sha1":"46710cfa31609978563e8bd8a556cf441e4d0db8","sha256":"625ae81b4bbba24ba500f941fd3c64d2b597bf5be22fc71c363616adeaba4760","sha512":"5f0208373b7ef27d6244e48a97f015459023c6fd5d6e03d24a0324d86aa044cfc9d55e58330133ba0ed9b33c57c29e0511a45e43e83f0dd7bcbf7a8ae8384082","ssdeep":"96:nZyTsFvwmBocgjI3Y0Pmn/6MjNZDht0+cxxV8i05rZC:ZyTauUobdfF5FC","tlshash":"17b16418e864cdb6d112415eac0b14d079dd3eedc4b5e435e4f879902bbac3ca28db2e","size":5285,"data":"","first_seen":"2025-10-23T21:23:43.799855Z","last_seen":"2025-10-23T21:23:43.799855Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/BPw5Otx5.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"ec0ab8b157592db48191b117c7b56fde","sha1":"9babaff5b55fadcb4844fc96edf0f8abc91a203e","sha256":"a061b643461304751a12dfa8d87ac8ff13dc5cfd684d51ee99df34fd7c4819f0","sha512":"c14cca5f9584dccc7ea7bc418eae38328bdf45d333529c294c9856641ef96cddc6ec471d3a70c5669c78d1eb00675e8aa07ccc33b043c805d62367056f6dbd4b","ssdeep":"","tlshash":"d9018ebc8704158dfe784fb55b1b7924c0252ddaffb409c6ca917501d38212feac8528","size":852,"data":"","first_seen":"2024-05-07T05:56:56Z","last_seen":"2026-04-15T02:03:05.956604Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/HA7_xM6x.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"2ed80197c76fb5db20aa8d18a44a5262","sha1":"45386d7906c002b925648a74074a801869f018dd","sha256":"e15890d2b09b832d7e44d263fbb994948c177131fda8a3491e02f34585e7062b","sha512":"ec00ce2688207562f16bd15fd832eb9836a5c353d5e89b899686aa51963d436591e4b13d3e490491fb6deed7a4127434f1748d0b7a85b31d39913d072de173cf","ssdeep":"192:CyqsxSEFu6ZufGq++k5qQbZQ+tOWwYpsTctY0ipgNE7oVKRpXKlEp:CyhZ8fK+kQQbDLwYpfYZplOKRpXH","tlshash":"ad12fad473ec72aa59620dd12475481ee434e6243b26f4d1f2b934bab497c44b273f2d","size":9185,"data":"","first_seen":"2025-10-23T21:23:43.072866Z","last_seen":"2025-10-23T21:23:43.072866Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KN757LMM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d532b7e434c57f278553dd6ba92d09a5","sha1":"b24973c878ddfdc49f1ce2a64b3bece4c22c75d5","sha256":"73807c304dbe044c60e8a6a13d4d3bd0e28ee2faced589ec265d876121e13392","sha512":"4624a749553c5cbd510591c9308df9f073125e30194c36fcf73c3fcf3335f3e3506a1c89e7e9de87d26f673cde645cfe4610fad0d67a1856ec3a69bec236d84e","ssdeep":"6144:lXyJFXH84g9Z8nP57Mr/s0PS/cN3Kxxc20+YlyeMjAX:liJFZg9Z8nP5YD8/FYlGG","tlshash":"598419cdb3c6746683a3b478403f114ba17b29a1b84cc895f186dce42d74aaa4277f7d","size":389283,"data":"","first_seen":"2025-10-23T21:23:43.077468Z","last_seen":"2025-10-23T21:23:43.077468Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/dVX510Ng.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"8c045b697e2fbc875efe89685afc7eee","sha1":"491a9e3c5e67694b82126638f628546711374ccd","sha256":"76b73ee8347f7127a9dc899932051c7d08ada047897f222360ce008700993f0e","sha512":"50db89683709b1df2e5d95127dce746509c2ea3cc0cb9e53ff7aadeac6e93513436d5ca47c11898fbd45b97ebf4e27ef3142fe85007e1d133e35261cb6a673d9","ssdeep":"","tlshash":"9111344e90351e9dd06ccfba806af38330209dbb2713e0597919d1a53eda4034d28f32","size":926,"data":"","first_seen":"2025-10-23T21:23:43.003111Z","last_seen":"2025-10-23T21:23:43.003111Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VRDLWS0SHC\u0026cx=c\u0026gtm=4e5am0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f245dc5a2102f41bf4c5c5323f1ad13b","sha1":"9515e72e569bde9d2da2309f5103905290328cb8","sha256":"76f9607d8873649890af00280bdf67d9846e2d3b9c96794a1f257d127ae1f105","sha512":"48676ef0e12ad17d589c5b7209c130f743d77c195ea4d41c8484e989665ce2ff0592e789e2e0cf6e29160d23721e8e1b26dec34520d76a62d6ad182dc5c60512","ssdeep":"","tlshash":"08113a06f01aedb684219771f08d658672be88f14bac2800974e8e9c3ca58b13d3b627","size":1000,"data":"","first_seen":"2025-04-10T15:32:30.605905Z","last_seen":"2026-06-06T23:12:58.08323Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/ext/cdp-customer/v1/analytics-js/snippet/233e4c5f9379d04ec864/analytics.min.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"009ba376452e3bdba0f98538c0575d44","sha1":"7fc6cb65590b122da408e8206cbebe360498ffed","sha256":"c31bef488aa8dee63ffe8601ea74d02285c0e9f189ff5540a94637b3a0fe99d9","sha512":"925ed13622d0b785921820f1b52ab0ad19ad44b8467ec1e15dfb03c9327dbd16ef037e1f11f9fdf80cbc4d9104c08a62c02b4651786efad4547aa5dc11dfe89b","ssdeep":"768:0xOyftQBCLo1sw/cexpme6piT5nQk8v2RbgFoF4OnImsSfWdLyWQL9ZsBpi0vRxv:UtQBQo1sAIeaE5Qk8uV4oF4OvpU5xMMf","tlshash":"d6a383c8f6e6f060439364b8803f110bf23e795e680e84a4f266d9d66cbc59d9127f79","size":106254,"data":"","first_seen":"2025-09-05T15:12:16.336085Z","last_seen":"2025-11-07T14:36:24.450735Z","times_seen":219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"59c31a2490b7c96e45fae5753a62673b","sha1":"0ee2a29625b4013a372e3e36e423af4c7e84471f","sha256":"b0bb19b2fdf783fc20593d66b215bc3376619fad2166c5fab69bd7c5a6a95d06","sha512":"4b61de5bce4e3d9b2baeea8478d7034915e1df650478f43b647843686f3d0e0cf41201dfb09c63ed4e9dec30f0dafb2cf27bc493f363585c8beb2f8c7013c9ff","ssdeep":"","tlshash":"52516586f325d82266db38bda73f1346663217e20d5098f2b2719f417c187cbc526b4d","size":2592,"data":"","first_seen":"2025-10-23T21:23:44.002052Z","last_seen":"2025-10-23T21:23:44.002052Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Cd3qlZHf.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"42fdd9f375ea0d9fbf23777bff652e0d","sha1":"deadc58e0db0e97e1379826ae88307b9449713e8","sha256":"8a0caa861093457d8fded651e5e99e76d36950d2a0e756c0dd713dde5c10b82e","sha512":"753cb793aa400055e3559a136b78082de077fc4347c27009270ef18e37fe077775a108586d02dd0de4d732e498056582848bea84982a1e87a781b9f9668b18ad","ssdeep":"","tlshash":"08d0c2ceea7065b8ba04455d945be662c634b90012986ac0987b5ea12f149c68246fd6","size":285,"data":"","first_seen":"2025-10-23T21:23:43.032949Z","last_seen":"2025-10-23T21:23:43.032949Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DJyngK5D.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"09f7bed55afc16a288abb07ee8b4d93c","sha1":"9b4762183025b609254d791c3b0dbc4f5e356d81","sha256":"7cdad479701ade61948dc83091312c222dc256792972c35cf5b3c740960dcc3b","sha512":"dd521a2c1fd79640bd81affab002c80f866f557a92b733c28b85f769d364df47dd7d2ee36d8803151a582b207e3f44ce20def05531be61d0b2eb72fdbe130117","ssdeep":"1536:fK6l28I8DZzkXhvPS5uLEiMAa73hBlxvHB+CIdzkVXiA6w+EV93mBE09:S6nCvPS5uZS8a9Q","tlshash":"b1832989f224b17782f75aca8376c20172a14984b809d4e4b0ed4d7b496e95c03afffc","size":86097,"data":"","first_seen":"2025-10-23T21:23:43.378835Z","last_seen":"2025-10-23T21:23:43.378835Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/ls-cdn.amplitude/plugin-session-replay-browser-1.4.0-min.js.gz","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c19b1b5d91c8d683b1310562d9c4a225","sha1":"4d45dcac5c6a88e10052f4e356b2170c20413441","sha256":"bb5779145f1ebdcdee053876a4ed060174dda4656978972304c79ddd5f36dac4","sha512":"3a4e8d2e8f5d9a3b45c08ce99374c149a5b67d04d016edfe6259dfbbba948a049301c0cfa5f9bf334cb93b9b4a3558cffa725c166a943c90834c8d2237a1a21c","ssdeep":"1536:Ask/3qTBpVX0Ib6vhb2pJkuppl5METErM2jnpkDtoT1JaM18PIQunrr9gltn2BE/:IqBfX046vhb2pKMQt1Jawi697w","tlshash":"4ec329deb397b033539355a980bb0101b73a6a19300d4464f62ad9ea3c7d847a277fbd","size":126923,"data":"","first_seen":"2025-08-09T06:39:58.991299Z","last_seen":"2026-03-24T13:49:06.781634Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Cd3qlZHf.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"42fdd9f375ea0d9fbf23777bff652e0d","sha1":"deadc58e0db0e97e1379826ae88307b9449713e8","sha256":"8a0caa861093457d8fded651e5e99e76d36950d2a0e756c0dd713dde5c10b82e","sha512":"753cb793aa400055e3559a136b78082de077fc4347c27009270ef18e37fe077775a108586d02dd0de4d732e498056582848bea84982a1e87a781b9f9668b18ad","ssdeep":"","tlshash":"08d0c2ceea7065b8ba04455d945be662c634b90012986ac0987b5ea12f149c68246fd6","size":285,"data":"","first_seen":"2025-10-23T21:23:43.032949Z","last_seen":"2025-10-23T21:23:43.032949Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/bZ-Z2_Lf.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"45e15f8f2007ce8f9ed5063fe94ccced","sha1":"fc913dc63f28fbb3eda1fa536ccb00752b7a9761","sha256":"096c6ef072db595fd16dd83665e9476402d90743702a0681ad81a7ced863365d","sha512":"1a3beb2bd0f6eb09aad5ff5add50bd8a72f7b21ee9c38bae1d0311d2ab657487f14b70ec25509e373aa062843307e9878d446055b1a295ae5fde08dd3215658f","ssdeep":"","tlshash":"2b2162aea434003f8e9d3419c9483465cf454f19f0ff884ab83d4d5a63001c2ec7ce28","size":1259,"data":"","first_seen":"2025-10-23T21:23:43.644576Z","last_seen":"2025-10-23T21:23:43.644576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/2aiJixXn.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"76b8fd495e680a729f98510d28ad379b","sha1":"5b04fc21d8c1ea03a84de09a1a0601b6155a82b1","sha256":"7da141faaa2caf6683cb25f3649578c06b4c8f869d54380ed15f4fbe5ce20018","sha512":"c0f12511ca0ffba201aa03038793154cf733272a42d6de313986ec10e1afd86f33ea49bd86f9f9c9c39f8f95d156908de23fe5c2795cc00f8952d9dc0ad50978","ssdeep":"","tlshash":"5e81528b1241b63a7ede434693f8541857304442700d7bfcb0ef8d38aa6ec86617fa70","size":4067,"data":"","first_seen":"2025-10-23T21:23:43.027704Z","last_seen":"2025-10-23T21:23:43.027704Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/js/pwa-load-event.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f463b05f25296c1e185cc82087291f6e","sha1":"d15dfa009eaeeaaf36af83b20ace25714adbc583","sha256":"3f5bcf295bac81715b4413d640843ee19600f6a17c96503038c6a4193c331865","sha512":"5ecd0baa189383e24afadcbe391266fac63cdcdcb7da68ab1371168fae81f05f0140b4dcd86bc4cc59f4ebb3f5949e94b302f05de00942886fe3060436ae03bc","ssdeep":"","tlshash":"64e02b7483fc55b808e182b75f47bb15116721a77068d990c1871906f8d148780a2fd2","size":375,"data":"","first_seen":"2024-08-19T15:07:41.99372Z","last_seen":"2026-04-15T02:03:05.836861Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/ext/google/recaptcha/api.js?render=explicit","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"004731ec95dd4895470921cf58b9b79d","sha1":"e7d8a5662c370e29757887709ad94bd35996e0da","sha256":"e4c7a803cb5e0e1e0999f06c9eb9a75cd9d3125177866a21b3901f3d96af774b","sha512":"fc0d4af1bb495c0d31eadf56221e89a4569b911393d15fd726424bc064e2a5c645258d41fe8ed2b764c1c3bca19ad67f7bc892bfc9d8676ccd29f8ad7c67ef1f","ssdeep":"","tlshash":"c61102771a14e0390b720ae1e2ffdab1f492742cf12c45d8e516dac81e6dcc7ce15589","size":1019,"data":"","first_seen":"2025-10-21T05:05:52.349088Z","last_seen":"2025-11-28T06:44:28.199412Z","times_seen":739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/ext/google/recaptcha/api.js?render=explicit","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"004731ec95dd4895470921cf58b9b79d","sha1":"e7d8a5662c370e29757887709ad94bd35996e0da","sha256":"e4c7a803cb5e0e1e0999f06c9eb9a75cd9d3125177866a21b3901f3d96af774b","sha512":"fc0d4af1bb495c0d31eadf56221e89a4569b911393d15fd726424bc064e2a5c645258d41fe8ed2b764c1c3bca19ad67f7bc892bfc9d8676ccd29f8ad7c67ef1f","ssdeep":"","tlshash":"c61102771a14e0390b720ae1e2ffdab1f492742cf12c45d8e516dac81e6dcc7ce15589","size":1019,"data":"","first_seen":"2025-10-21T05:05:52.349088Z","last_seen":"2025-11-28T06:44:28.199412Z","times_seen":739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ca8d5fafbed3f003c32840209606bb2","sha1":"1d6af17af7d245d003a9675bffee0f2a43a57d48","sha256":"3d84b38965fccd9fcbcb12537b8b656bb062565e4b6b41be30da09afb838bd3c","sha512":"95fd07ebd69fecbd119a8b2da6855d149ef3d0d1fd3b81dc785d0259cc31446da035824cea6dabb05401d2c414e4609ba59b0f54ca237d718d4bc17e24d299a5","ssdeep":"","tlshash":"4721ce75f55bdc6409ce286e852f234be4b40e5dda21b19097f0ee8138b8bf52582a1e","size":1222,"data":"","first_seen":"2025-10-23T21:23:44.00575Z","last_seen":"2025-10-23T21:23:44.00575Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/ext/cdp-customer//v1/analytics-js/inAppPlugin.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b3f92234d8907a103ec9dc2b05589f1","sha1":"2f2c0961bace40551cc39d1728715b94ec82db2e","sha256":"ae91906abf85a449f6ec41c31f1bc77b9bd3505bb7e55d61760b47c3fb11e3dd","sha512":"62174308a9634879afda50af1511adf6af4081ae78910db5c71cc0bb764cfb2c287c659d8653268b4b1eba7e6eb76b7b8096c1416a28b069f19e38019a7d38a2","ssdeep":"96:frYe+t6Sgb0qKEIwRGBMtIPmcKhgbUk6HEHvRrVxEC7NTjQCtGf8J4HJDFqK/+bD:Nd7KOwBMtgLgHE7T864KKqKk","tlshash":"3cb1ec9df793f82c05f39a7de5773423923a3b026099e411e057cec2596838d6123bb9","size":5580,"data":"","first_seen":"2025-09-25T08:21:12.736151Z","last_seen":"2025-12-15T01:19:11.275667Z","times_seen":356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/BtB77a5L.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"dfc44e344a9ad22afaee554b70a7c9c7","sha1":"ca9c20243aca235b742c516291172f31e75eb850","sha256":"9b79f85da1c22ea6d55df696e27fab8c58c53dfc34dec332586c42c604ab5eca","sha512":"ce4a18a9250feac95dca065a37a0d5c6314edcd602b54eb9b77f1914ff5c049b3fde99ea272c0d3714ebf051cc56bbebad09adf6a6fbaec90c16d6527f2845bf","ssdeep":"","tlshash":"b141938eb1545e3063d7e1f19009a10087599f2b39ac81c0b925b7c3022697ef8cba91","size":2046,"data":"","first_seen":"2025-10-23T21:23:43.150991Z","last_seen":"2025-10-23T21:23:43.150991Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/BnfXAfmC.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"8a89376a241fbea1604d6977aeae217f","sha1":"317aa48f395220fb03d5813de2054a1785f42128","sha256":"4673c80b7aa735671d12d253ac81444723cb9738c9674af15435c35611be806a","sha512":"889b6f408eebcad2282fb8fe4bcd5ffd0afb065e675ef280324ee9891cd7e37072e05dd0e6ba299bb8a28f6b8b2b897f7c4a07bffd641d45ecfc993863fab30e","ssdeep":"","tlshash":"9241df0e9486d164eafb0051a51c0681621cad9ee464085df2fce7effb0c87d7b0da70","size":2247,"data":"","first_seen":"2025-10-23T21:23:43.85208Z","last_seen":"2025-10-23T21:23:43.85208Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DfwoQPEh.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"8c8a6990a3518a2f59506a03ccd2f80a","sha1":"01fe4cc6acde6ae5f2d1e32d534ce698e3704c72","sha256":"a557d36f950831c7cf318c05b6303be42f065c8e687f34a3c7361f1c47da26fa","sha512":"88f6af5a771114c39ba6e8c15793b25bbc8c28b88cc78b716cc19371c505250b36567e7862f55999eb2d03d96f5dd26304af47c868bb99201c86fbf88dd12bb7","ssdeep":"","tlshash":"4b21006fb52d91e41b39ecd036d93818d1144f087446cdc0aceaee125832e8765cee7b","size":1157,"data":"","first_seen":"2025-10-23T21:23:43.144376Z","last_seen":"2025-10-23T21:23:43.144376Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/js/fp2.min.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","size":34877,"data":"","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DPl3vcyW.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfe0f44dfa92af51e196e1502b538d1b","sha1":"811e92c105e0ee9e1dbe4fa22f846811039b9f53","sha256":"47b6231210b4f53f08c1c1bb4717ce71d63bdeb03b7c13e53c783e6c54ba0f8f","sha512":"09de5241d045f8b044a43c43f68299107e7de758c0361fcf0211c0b55ebdc075f5723d025c714e36bc8b9bdac6b1f81ba8db60296e0e415f1ee1150e5dd4d229","ssdeep":"1536:qUNhtJfsOYXoS1aX9cebZyN7DA2wkGgL+oh31xzSP6qL8TDhyKPkG/uHAj9eiy5X:qohtJfsOgbeM7pgK+oh310KRPj9OKgR","tlshash":"13d36f4b4e0c0e7a056213b12fada7b362acc07571dbc3e657bf82182375465aee275c","size":140119,"data":"","first_seen":"2025-10-23T21:23:43.99746Z","last_seen":"2025-10-23T21:23:43.99746Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/B-6jxm67.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"778477b8556daf8ddd1d518531c2afa9","sha1":"efee34dff3755e0af4081667a91742e3a4b579de","sha256":"2dcbbda2044b5db22575124b9181cb21038a82eeda00123bc996ca93ad590166","sha512":"825a9477bb15be05fc1e322b324e126ccffb27e7890296085e6a7d30587d11634a7bcf533420d1675a79ec988969595850de0ec601a53d6fe39576b810335526","ssdeep":"","tlshash":"37815679b027a8f5a210d36f9e044d9239cf0dfe5a15f076e0f4a480a7eac74da4d352","size":3880,"data":"","first_seen":"2025-10-23T21:23:43.108861Z","last_seen":"2025-10-23T21:23:43.108861Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DlAUqK2U.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","size":91,"data":"","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-07-27T14:20:46.915264Z","times_seen":24751,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/NGaR-3eG.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"a5706fc7cc65a5ec11657ba938c974f0","sha1":"ce9d345c477f72ed2cf8458fb7579ba71adf9e36","sha256":"1cd65d71ae4689fbe9a88df6016ce61faebff9ecb074e5903663ffc47064c2da","sha512":"18ea9b138b9f3594255c3f851a9944df5fd381b52932f2415ab74a67d389d4bf8ee0a192219f8e38de222b122ff7ead1d288311acab1d51b062c7cb0c19392e0","ssdeep":"768:L0aRsM+IUjGqxlI8MivKoXIOWWMDwcaTIhdSx5QI3vunFqnPz1p1gImfPMEI134C:Q90oXIOWWMDwcaxPEfPiWO","tlshash":"1303e819a4296c3ed4775dec78981401f25d2feed0804c22a1fc9e187babc38279db79","size":38008,"data":"","first_seen":"2025-10-23T21:23:43.121534Z","last_seen":"2025-10-23T21:23:43.121534Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/js/button.js","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"587e13c24d17141fecff62e86a00ffc4","sha1":"b67c345ddb508d91f6aeb774a086db22cef92530","sha256":"b18d676e74a1991942986057293a33b529fe3b5bad23ba68c06667d67a1d225a","sha512":"8c61210e82be9f7e0581456056d8592a8c4f15cd5a361e5c37f57308d367406b80487b99a2c26a4530eb777f8ba43f7a5ea584d7bfdbaf710527871be5ececec","ssdeep":"24576:/o36wXnnOqCNTKi983ht1x2vRfXjXjryWsz9tQ:/o36wXnnOqCNTKe83ht1xYdTjryWshtQ","tlshash":"e2155c897644353a82dba2bf702b170976379552a444d46cf878e8d4bfb4d09823bfbc","size":899155,"data":"","first_seen":"2025-09-20T02:53:52.592022Z","last_seen":"2026-01-19T12:14:51.147852Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/CAc6Ks9r.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"2246dbd1bb468f55b82d339c535f2c45","sha1":"925fbf9a0bd821296f8fe3dc84f938506215dd83","sha256":"f1b47c5154f58a1c0d5e74f60faefc61d9aa78f2b6366c03c7b301c3b5759770","sha512":"a8a9369efbc238a644a38286c37f6700aa0cfe618f7e34807a6490c7b9564b97a258d66c33c530176a49691820cb6ed411db926f6b6746069aefbb5a49d55f8e","ssdeep":"192:4GPJMSmZkgphq+Z3owRPV5T2wSgrTln+9h2JRz8En:PFmZkgi+Z3owRVswSgrxSh2JRzRn","tlshash":"72e12a8ff4498535d2f208de9918356252260bf6b10880e2f17c5d363f58ec96a5dfae","size":6857,"data":"","first_seen":"2025-10-23T21:23:43.147746Z","last_seen":"2025-10-23T21:23:43.147746Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/BqzaD3Pl.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"48659d4240295b9e64caab349266ed60","sha1":"72d8336e72ca76db1563fac1c496ded6ff65ae3c","sha256":"127ea5b1a4a77e85a4a100e7f9301b32e1e607a2c9b3b9f714def75e098b0ab1","sha512":"4ad1491e8175e0c642a3032062dd6e2ebb251ba4c1b94e4192e4fa50688cfbf6b748d45c0433bf36af924f90c65f4bb9e35267929b16482411800a5346042745","ssdeep":"","tlshash":"e8f0c92eb1dab43543ccd8c441380c006861ad602c0e218ed19b9f13b1d07a3708bd30","size":510,"data":"","first_seen":"2025-09-04T16:11:26.386239Z","last_seen":"2026-04-12T00:18:50.830483Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KN757LMM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca9ea9e2731a696baacc032e77378d37","sha1":"e4bf78933721aaaf6bff90049db9594932e9fada","sha256":"5cb37735a72c834240581b0a0784ea2fe6c18ea37ff4f9c20f98822fe6dc69d9","sha512":"2f2be0ceeed639290a42ee108e39acedd13ce342f722ef3a410044eb74ed5bd80e7aa5df73e632aca9ee66171f562a4823f2544aba956272ab1acc32402bbbfe","ssdeep":"6144:lryJFXJ84g9Z8nP57Mr/s0PS/cN3Kxxc20+YlyeMjAX:luJFfg9Z8nP5YD8/FYlGG","tlshash":"6b8419cdb3c6746683a3b478403f114ba17b29a1b84cc895f186dce42d74aaa4277f7d","size":389269,"data":"","first_seen":"2025-10-23T21:23:44.009247Z","last_seen":"2025-10-23T21:23:44.009247Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/js/pwa-load-event.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f463b05f25296c1e185cc82087291f6e","sha1":"d15dfa009eaeeaaf36af83b20ace25714adbc583","sha256":"3f5bcf295bac81715b4413d640843ee19600f6a17c96503038c6a4193c331865","sha512":"5ecd0baa189383e24afadcbe391266fac63cdcdcb7da68ab1371168fae81f05f0140b4dcd86bc4cc59f4ebb3f5949e94b302f05de00942886fe3060436ae03bc","ssdeep":"","tlshash":"64e02b7483fc55b808e182b75f47bb15116721a77068d990c1871906f8d148780a2fd2","size":375,"data":"","first_seen":"2024-08-19T15:07:41.99372Z","last_seen":"2026-04-15T02:03:05.836861Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DIbTYh-3.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"dcddb5f6b70b36edcfa0cc3d5bb3576b","sha1":"b4219dbc3b1c5345ebb6d6cfe50619fdd1865964","sha256":"b61eb645e42eb2c9170d192f8507476f34e4a1702bc6569089d88aa1387187e7","sha512":"c0ddcd2da6950054040441aa6b52bccce9894b2958b4147892e9aa58e4f85fbc6ab3171c26603fab35d9387bc804acaf5b23d66645f08dd8dbac2207647f66d1","ssdeep":"","tlshash":"48e07dca249644ff23686fdca76260b0a0380704b349fe49631dcde3770238a8093e7e","size":323,"data":"","first_seen":"2025-10-23T21:23:43.192534Z","last_seen":"2025-10-23T21:23:43.192534Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"37e1798cbcf17a4502d0bed9dcde7c43","sha1":"f81cd898efe43990d60b8414a64438ea4cfc9e94","sha256":"433d33a3fff4726f124b545b88b5b8805a324c256344cbcdc0cacb7866475c54","sha512":"070bb31ae30ce1bc57fb117f55895ca1cb9a36a51a6454aeeea6780b984cff76fceb32df6fdbfc7542f629e3155cfc0740a381e9abf9148a7d73ddb496670d7a","ssdeep":"","tlshash":"e111ed3cb91c52732fe04297fd2ec54fb10af296538b4bb3704c82c9413aa2641e8261","size":1000,"data":"","first_seen":"2025-10-08T08:35:25.800125Z","last_seen":"2026-04-13T17:30:03.804389Z","times_seen":377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/D79Xm9UW.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"361c2887a64506744d7b789a29ffca7d","sha1":"f94e310d5af438f3dc8bc1302895d88487ce107c","sha256":"f2fe248d342fdc83e05b1ecfd76787c2ca90b25a4bf32d3f275452fd1ae2f194","sha512":"10c1ee235b7e1214cbe3a2ab39d483b6b00b3a4560005c806b70d7ec9951af42c49116b8882d03be459b163330c300b44fce024215dc6d3258de50af809d672e","ssdeep":"192:6pazyEaxrcxshi0pM3bumtmRNwDA8T4uC3/bR5AmMbgj9ak9rLX:2azyEaZcxshi0+SPQDvk/F5rMS9aeP","tlshash":"4ad11bccb4a67021b37b4ae5d0b78107763829a1348bd4e0e01eded73e15a62a792d8d","size":6294,"data":"","first_seen":"2025-10-23T21:23:43.483867Z","last_seen":"2025-10-23T21:23:43.483867Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/BEJljnU5.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"4f5cd1cc5d3bcfae663e6b31ed67507f","sha1":"41e50867bd471680ed8b46c618b030fa8d782484","sha256":"47e34e1335611aac998aedc0d97dc02fb36227fee57b00bba34f9647f67c83e8","sha512":"0d3d9dd36a5c1b8375bc0402140163bd76ac5b061d2b2371322f7ac99b7f5f4f0ca41fcd56a3a0108c0346a146dc4aeb9ff14d83f8e9bfa91ec6371f8d0875f3","ssdeep":"1536:NyG6S8kJgg7aPHkW4EFP2SF8QJCmSBynmI0IcIvBynmI0IcIWO/Og1JJBynmI0I1:N6xPHkMqKi1zQgpxHYV","tlshash":"1694c6e573a4a1e4e607fbfcc922b471715b35fb3b91cac466d04ea6bb1219c5c88c90","size":448056,"data":"","first_seen":"2025-10-23T21:23:43.908274Z","last_seen":"2025-10-23T21:23:43.908274Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/yjFwyy9d.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"60567b3b407a58df12f8e745e33b9cfd","sha1":"4549a829818d68f0dbbf0ea5bca2e52291873c63","sha256":"29075600aa13f0683bc29f92ee81468b04021e89f44e393d524fa32bda9a018b","sha512":"39ffb96b3b8d509d32e63953f5037f58bc144ff4881cc5e48933ca56c014c0195ca607db8c41de0dbb860a5b84c53a08eeea53318fb7f801edf06590e6e818bb","ssdeep":"","tlshash":"94d0955d5033d1b45575056904db0d06d14754bd333063246066fb7467a84d28b4fd05","size":259,"data":"","first_seen":"2025-10-23T21:23:43.040548Z","last_seen":"2025-10-23T21:23:43.040548Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DxuQGHYR.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"3685ada0a15d8cc766d4789affb5eaaf","sha1":"09e47daf0ceed09f05723fe81e6e409f8d2476c0","sha256":"4ec48ad991d10405800482d3eca5e3e43e7a8902e717e75103364ddae3230e9e","sha512":"a7516dc78e60e56a1d6d52bef13e34f1b4eaf3e5fde33ceda332d2e48a2f388ad33ce5722f76e4a60355a9410c5ae6e58f8531e60ad450c4c480cfc662a467eb","ssdeep":"","tlshash":"aae0abce745d112093075ab99177106b9e2c1ec173086dd04409988334e0cd3c02fe97","size":412,"data":"","first_seen":"2025-10-23T21:23:43.137791Z","last_seen":"2025-10-23T21:23:43.137791Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/CMD09m2L.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"82423b47211ad4437db92979eba6c01d","sha1":"06f1d0a7d4d7a5f08c1b559a2d582df671cc8b5e","sha256":"a20ab53b077b13d10e8758e21cd9ab29854d296088394ef8493aa15127eb79ca","sha512":"cd65066973315f44799a89c1124c2c0d67114d8f3d1be4c8d28815b77845394c06f453ec390f62deba58e4c7a5a04991747df9fb42498c4c02848f1435c4d477","ssdeep":"384:/bLmDw0GjHIVo6eR6o1Shl449OsLV5jbHQ6NhWWxZ9HqDXRoOkm4Zes:/PmDw0MHIVo64X1NdshJTQ63WUG4h","tlshash":"439295c832c7f5968793197681bf100bb23e6d85a40d8892d53ae0d97c7486c867bfed","size":19331,"data":"","first_seen":"2025-10-23T21:23:43.023608Z","last_seen":"2025-10-23T21:23:43.023608Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/B7EGnscI.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7a4ee68aa9a8cde229584e30d2bf43b","sha1":"195dc468f5a80fd31b6da530d947863ca5581631","sha256":"f2ed174ddd8c31ec680b064d89a26c34168888d10f901f184dd569ccbacc1d38","sha512":"9ce92da01c7862675b4c71fb72fef58fe59fad6d3a0dda73f3383f574d28b6c54432111a78f892152c002f5cea2d5b4a986752f4a66474ac17dce158414342e2","ssdeep":"","tlshash":"fcf0201bd46181688014dcf4d038e0b0627754d717ced370c0ce0bb06320034e1a67bb","size":472,"data":"","first_seen":"2025-10-23T21:23:43.655607Z","last_seen":"2025-10-23T21:23:43.655607Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b7ffd5b7408c1219fbd35dd53208e70","sha1":"87db90852ceaf58be691a8c2492353a5d76de059","sha256":"fb997fc9d5069092971ad25f0131258ced2c36bf9d313ad535de25ac5c36e70c","sha512":"4045a6bb31e36cdcd5d0d32b3a672004365bfe391ea66b11bf2d2ee96e2715105255f02bf2b442072b902e9f0ba7db465a5d4733ddf3b18378375de86f112d8f","ssdeep":"","tlshash":"633126cab36189126a97383b653b5344617326e61e0268a3f2260e447c2cadbd53375d","size":1677,"data":"","first_seen":"2025-08-09T06:39:59.161093Z","last_seen":"2026-03-24T20:06:00.342299Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/2aiJixXn.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"76b8fd495e680a729f98510d28ad379b","sha1":"5b04fc21d8c1ea03a84de09a1a0601b6155a82b1","sha256":"7da141faaa2caf6683cb25f3649578c06b4c8f869d54380ed15f4fbe5ce20018","sha512":"c0f12511ca0ffba201aa03038793154cf733272a42d6de313986ec10e1afd86f33ea49bd86f9f9c9c39f8f95d156908de23fe5c2795cc00f8952d9dc0ad50978","ssdeep":"","tlshash":"5e81528b1241b63a7ede434693f8541857304442700d7bfcb0ef8d38aa6ec86617fa70","size":4067,"data":"","first_seen":"2025-10-23T21:23:43.027704Z","last_seen":"2025-10-23T21:23:43.027704Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/ogk41E93.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cf2ea15d679c5841aae226b1c497767","sha1":"eda32a93183507bb5603fc75d1fae0b99e6a8a43","sha256":"f50041e7d52b4758cdddb60c8f5fc46407ad44cc8593deff12976fa0d5e645ff","sha512":"897ea42a3bb4d5a70fc3c1ca4279ef9e06eec5db63b7ab9ceda378ec43d6fd0bea1fa643545e10c0dc42a66f110ab4abd16f35f247529f8f74a2bc7c28f47faf","ssdeep":"","tlshash":"8d11219e19c0cefda10c9efcae32742415d40cf633ec90d3c21c295a4239129f566397","size":1044,"data":"","first_seen":"2025-10-23T21:23:43.725371Z","last_seen":"2025-10-23T21:23:43.725371Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/HA7_xM6x.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"2ed80197c76fb5db20aa8d18a44a5262","sha1":"45386d7906c002b925648a74074a801869f018dd","sha256":"e15890d2b09b832d7e44d263fbb994948c177131fda8a3491e02f34585e7062b","sha512":"ec00ce2688207562f16bd15fd832eb9836a5c353d5e89b899686aa51963d436591e4b13d3e490491fb6deed7a4127434f1748d0b7a85b31d39913d072de173cf","ssdeep":"192:CyqsxSEFu6ZufGq++k5qQbZQ+tOWwYpsTctY0ipgNE7oVKRpXKlEp:CyhZ8fK+kQQbDLwYpfYZplOKRpXH","tlshash":"ad12fad473ec72aa59620dd12475481ee434e6243b26f4d1f2b934bab497c44b273f2d","size":9185,"data":"","first_seen":"2025-10-23T21:23:43.072866Z","last_seen":"2025-10-23T21:23:43.072866Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/55SCWfZf.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"f5965e3e3b073337215714a0974cd349","sha1":"56d4b0838b90418da30686e5ba4a68b4e9a8d3b0","sha256":"53ad174e7a20b7f228efd953cd58f105159323c8bb8e035fe505aa3d1e786f4c","sha512":"a195104b8ba4de53a42388fc8aca93c98297af1d451d39a04d30eacd14b7aff3c6216f663a6af85be0d732d24ed07dad07ed6c90b5e2220fb46682defa902ca4","ssdeep":"192:KiFojMIZjkItgj6pnaJe/HA9iReMDjHMtpgCtAoRXSAd55rD1W55Jr0UWip8W4JQ:KiCMIZjy0LhYRHMAhPMN07i6jC","tlshash":"42024fde520a65b00bd706fa81e846d0d6b00448f04d997c64f8dddf477ec8917a6bbe","size":8647,"data":"","first_seen":"2025-10-23T21:23:42.957856Z","last_seen":"2025-10-23T21:23:42.957856Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/BPw5Otx5.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"ec0ab8b157592db48191b117c7b56fde","sha1":"9babaff5b55fadcb4844fc96edf0f8abc91a203e","sha256":"a061b643461304751a12dfa8d87ac8ff13dc5cfd684d51ee99df34fd7c4819f0","sha512":"c14cca5f9584dccc7ea7bc418eae38328bdf45d333529c294c9856641ef96cddc6ec471d3a70c5669c78d1eb00675e8aa07ccc33b043c805d62367056f6dbd4b","ssdeep":"","tlshash":"d9018ebc8704158dfe784fb55b1b7924c0252ddaffb409c6ca917501d38212feac8528","size":852,"data":"","first_seen":"2024-05-07T05:56:56Z","last_seen":"2026-04-15T02:03:05.956604Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/55SCWfZf.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"f5965e3e3b073337215714a0974cd349","sha1":"56d4b0838b90418da30686e5ba4a68b4e9a8d3b0","sha256":"53ad174e7a20b7f228efd953cd58f105159323c8bb8e035fe505aa3d1e786f4c","sha512":"a195104b8ba4de53a42388fc8aca93c98297af1d451d39a04d30eacd14b7aff3c6216f663a6af85be0d732d24ed07dad07ed6c90b5e2220fb46682defa902ca4","ssdeep":"192:KiFojMIZjkItgj6pnaJe/HA9iReMDjHMtpgCtAoRXSAd55rD1W55Jr0UWip8W4JQ:KiCMIZjy0LhYRHMAhPMN07i6jC","tlshash":"42024fde520a65b00bd706fa81e846d0d6b00448f04d997c64f8dddf477ec8917a6bbe","size":8647,"data":"","first_seen":"2025-10-23T21:23:42.957856Z","last_seen":"2025-10-23T21:23:42.957856Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b7ffd5b7408c1219fbd35dd53208e70","sha1":"87db90852ceaf58be691a8c2492353a5d76de059","sha256":"fb997fc9d5069092971ad25f0131258ced2c36bf9d313ad535de25ac5c36e70c","sha512":"4045a6bb31e36cdcd5d0d32b3a672004365bfe391ea66b11bf2d2ee96e2715105255f02bf2b442072b902e9f0ba7db465a5d4733ddf3b18378375de86f112d8f","ssdeep":"","tlshash":"633126cab36189126a97383b653b5344617326e61e0268a3f2260e447c2cadbd53375d","size":1677,"data":"","first_seen":"2025-08-09T06:39:59.161093Z","last_seen":"2026-03-24T20:06:00.342299Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/zyQ2Z5SQ.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"eed8a2ef5a4b04857acd9c5d606c298d","sha1":"0c034c159ffbdf024da5780d72030d05acd58455","sha256":"8b56d868ad02e7a61765e5ed8ff1eaac4ba38952f40a0cd99de86a9a5bc01fde","sha512":"d098077756d7129cfe467e4fd24a186b819b058cc23b37b8abb7599d9eacb5a6d97fb0621cdaf1cfab9d97b031b0e57dd5e639aa63123f1aad2a14a89c54c49e","ssdeep":"","tlshash":"744130da274e0518340e8382c885f5aaa73663a5b5e3d46c3ce29dc77201c43f6b0e65","size":2215,"data":"","first_seen":"2025-10-23T21:23:43.083786Z","last_seen":"2025-10-23T21:23:43.083786Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/cryptojs-aes.min.js?v=1","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd93b7f0987a614bc17698503bcb6af9","sha1":"68a66448326499ff34c75bf31e2769b278584e0c","sha256":"8d4fae1a37a5b5338c889d0897b50024194b4d3ae94940e7e42c1c1423a1183e","sha512":"e3b87dfe10c0e3f3d801a85ae9c654a74eac22c2a93a757568a0d2b13755c36aeb5f9337e94a21db4ef2d1f0f1cfb98fccbbb0151d5cdf8d967730df96bfde98","ssdeep":"192:9BIGDmDm90mP9z8Ui015lN1I5rI2Tru6hMJFmHV+mdpwIfyAaYfKnNVYkUUFJZm3:9yiB0ez8UiIX1SrTegsEHJuI+y8Z7AX","tlshash":"625297c936edb94263963028587f6017b86b28b6945c4824f29cd4ddff9899dc03ae3c","size":13722,"data":"","first_seen":"2024-11-30T18:08:34.076577Z","last_seen":"2026-06-26T20:23:29.818692Z","times_seen":1206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/BmraxXvh.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"88026a00966ccd09a8426d069248f323","sha1":"a0aa2ca00b95a22b880bea71b377663ffef35879","sha256":"32bd35f0d60ed26167d0953eae6dfbd36b8af8780d52c863feb36a377675bcde","sha512":"aff334be6c8bf7db24e7af6214b0cbc497c4be336ed9fe22c6e07bee07027aae685746b27478a561a13897ddb909835137351b61db05738659c2b27a70ce3ef4","ssdeep":"","tlshash":"2e6130fc1635a57226eb17bb43a20c9282764455f049b27010da8f0c552dc984bf7ffa","size":3347,"data":"","first_seen":"2025-10-23T21:23:43.065131Z","last_seen":"2025-10-23T21:23:43.065131Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/BDhHT3KD.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"4bd02986e01eb3e94590a19c88805efe","sha1":"c57ba5ad73c2aa745e85d23ea7182495377096f5","sha256":"73e70384a9892abd7165ccaeff284f60a56d2e341f9472b3652c13a1afa60d57","sha512":"6a212832f960c9abb6f5a6b1d2d7473e7a6996a8117bb5df846b1cbcc10e4da5193e621d98b523f65d448591ae15057e5a291bbca2dd34f4b1f49b32a04cefa2","ssdeep":"192:rFWTdVAnpRh4jyMSWQUtl6ZXg9XsLDJO+cOhQ6FqUwNp2wECoks8SrrfTfk0yCqw:rFWFN7JB+QWI/NXsXtOgHxKu","tlshash":"fe028658c42a85b0e13b899e59c44f513f5d2fb24451d8a0b4f86a3d3b8a870337ef6e","size":8413,"data":"","first_seen":"2025-10-23T21:23:43.164349Z","last_seen":"2025-10-23T21:23:43.164349Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/cryptojs-aes.min.js?v=1","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd93b7f0987a614bc17698503bcb6af9","sha1":"68a66448326499ff34c75bf31e2769b278584e0c","sha256":"8d4fae1a37a5b5338c889d0897b50024194b4d3ae94940e7e42c1c1423a1183e","sha512":"e3b87dfe10c0e3f3d801a85ae9c654a74eac22c2a93a757568a0d2b13755c36aeb5f9337e94a21db4ef2d1f0f1cfb98fccbbb0151d5cdf8d967730df96bfde98","ssdeep":"192:9BIGDmDm90mP9z8Ui015lN1I5rI2Tru6hMJFmHV+mdpwIfyAaYfKnNVYkUUFJZm3:9yiB0ez8UiIX1SrTegsEHJuI+y8Z7AX","tlshash":"625297c936edb94263963028587f6017b86b28b6945c4824f29cd4ddff9899dc03ae3c","size":13722,"data":"","first_seen":"2024-11-30T18:08:34.076577Z","last_seen":"2026-06-26T20:23:29.818692Z","times_seen":1206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/ext/cdp-customer/v1/analytics-js/snippet/233e4c5f9379d04ec864/analytics.min.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"009ba376452e3bdba0f98538c0575d44","sha1":"7fc6cb65590b122da408e8206cbebe360498ffed","sha256":"c31bef488aa8dee63ffe8601ea74d02285c0e9f189ff5540a94637b3a0fe99d9","sha512":"925ed13622d0b785921820f1b52ab0ad19ad44b8467ec1e15dfb03c9327dbd16ef037e1f11f9fdf80cbc4d9104c08a62c02b4651786efad4547aa5dc11dfe89b","ssdeep":"768:0xOyftQBCLo1sw/cexpme6piT5nQk8v2RbgFoF4OnImsSfWdLyWQL9ZsBpi0vRxv:UtQBQo1sAIeaE5Qk8uV4oF4OvpU5xMMf","tlshash":"d6a383c8f6e6f060439364b8803f110bf23e795e680e84a4f266d9d66cbc59d9127f79","size":106254,"data":"","first_seen":"2025-09-05T15:12:16.336085Z","last_seen":"2025-11-07T14:36:24.450735Z","times_seen":219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/B_Mdq3qX.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"ceed729097ff6a2df780d14abc33fdae","sha1":"4eea4d6aea0683aad27ec3c6cffdddca21c63d4c","sha256":"c31a6e2e99e30b5435dc049fcfca948e1563ddc0780fc066fcbc7568761943ea","sha512":"ba36492e728822a371503f42e356faac4f81ea03c4e996e3b63f92daa1f34a9e300f29531376894415800ed3482e89a9fd020f212d127935cc670c0b683461aa","ssdeep":"","tlshash":"8e21687d4aec2dcc091cbc842ad8ad7c7514d2496181cc8638a6fed7f487d5adc48471","size":1111,"data":"","first_seen":"2025-10-23T21:23:43.842202Z","last_seen":"2025-10-23T21:23:43.842202Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/NGaR-3eG.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"a5706fc7cc65a5ec11657ba938c974f0","sha1":"ce9d345c477f72ed2cf8458fb7579ba71adf9e36","sha256":"1cd65d71ae4689fbe9a88df6016ce61faebff9ecb074e5903663ffc47064c2da","sha512":"18ea9b138b9f3594255c3f851a9944df5fd381b52932f2415ab74a67d389d4bf8ee0a192219f8e38de222b122ff7ead1d288311acab1d51b062c7cb0c19392e0","ssdeep":"768:L0aRsM+IUjGqxlI8MivKoXIOWWMDwcaTIhdSx5QI3vunFqnPz1p1gImfPMEI134C:Q90oXIOWWMDwcaxPEfPiWO","tlshash":"1303e819a4296c3ed4775dec78981401f25d2feed0804c22a1fc9e187babc38279db79","size":38008,"data":"","first_seen":"2025-10-23T21:23:43.121534Z","last_seen":"2025-10-23T21:23:43.121534Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/jSQlKdbM.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8dd077c592f5f20f5063cb16196340b","sha1":"5b346fe8c432853edf1a6291cd7cf260780df134","sha256":"239c923e223189feeab6b0ff5066fccedcb6ba682f9401d006214967d5a4adcb","sha512":"a3121e894609cbe47496761ff4756dd4144361de2aa23e86e37a577eef769d4a0d3193de72a00748be051a86bcd9101d7a00c701368ebe17c565593446cded2c","ssdeep":"","tlshash":"5011c09f5494c8bc914c5ef8dd23742501f42deb9bec54c2c28d0d7a537501ec0aa757","size":1091,"data":"","first_seen":"2025-10-23T21:23:43.68545Z","last_seen":"2025-10-23T21:23:43.68545Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/C6v4_gPe.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"0bd8134eee6c2f7999ff16d2d1d34907","sha1":"046502fbef95581d59c6d1c37b63e579cebfcb62","sha256":"9bb2d2ee27cdf054129ac8bdb215a035891dc42559db71f8a8544273e07e2f5a","sha512":"77a187b79cd506cca25d9d77dfe6cc7646c79c51d24231ede8a97a5aa4c7a7be4564d9bcf05d83045c8ada9a648afbb21530cb5539da43f8504a2da9407a88ac","ssdeep":"","tlshash":"0361960fe84554b9063174e8a218a5947a3c1fede2941841a3b4dff70b97c6db238bd6","size":3449,"data":"","first_seen":"2025-10-23T21:23:43.790017Z","last_seen":"2025-10-23T21:23:43.790017Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Razus-0y.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a41f0a93536181ab28b02f37731757eb","sha1":"60dd82451fa91f9c784158226779cfdd6c94d1d0","sha256":"ab433d16063a4b34933b2a525fbcfd0cb5b4a60f7c3ff04cfc49c80567caa782","sha512":"286501ac2ce88c4e6ad719f3674f51a085ece9f6411a8aa446994a2f04397586765e8dab308923b04e594ce0238f4317e49bbf8daefc7aa1065e4684b65b996b","ssdeep":"6144:fnSzjJLQT2m905wx1DQTXdFSW3bVSzA6MnIgqaTLwbvvosSDh6qJJ8LHIF9y:PWjpQ39ewx1cFSubV4mIgqaPsG8qJJ6","tlshash":"51a45bd97196b02253f619f4907b0106f3392a58384ec4e4f16daeea3d7680a91b7f7c","size":488942,"data":"","first_seen":"2025-10-23T21:23:43.118234Z","last_seen":"2025-10-23T21:23:43.118234Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Fqb33JjP.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"f7ee77146715ddc5dcb203c8ac5bf158","sha1":"0861a36e16f5d8cd3994873071bec4e345978a9b","sha256":"715e1a3277a55e3d523436f8be5b9ff8090e8dad371002d9c6ca6491d248151c","sha512":"36c9ccfcf25ca222e6ab57aff1f8c216965f37eb27817b9da53d1cc50e9ab13c6b66c799768407a5c937db73499f617897f799b7dbb9bdb696cff52e7ab432c4","ssdeep":"","tlshash":"0a110e2bfa0a0b2663331c7a46a931e6cf650bcb2c7984c43c54df261237c83e5a6f44","size":1029,"data":"","first_seen":"2025-10-23T21:23:43.880984Z","last_seen":"2025-10-23T21:23:43.880984Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/B-__ut10.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"6a6d443967d5558ae994d773af1043ff","sha1":"112b074c2bcbcf1a16fe5a1f1819ac4b0381f957","sha256":"43c8654d763c571af6e6864ea07a0f342d7fdfdaa5e500a67bf815574c6b96a8","sha512":"ea4fc99a9133aeb49fae403dbefa264abe46e85ef73e5234a60c2bfd330c0e85b9f6f430452c6ada9e6d49e67c3c9ff8e84e0fa5a3b511804d70b3d21eac5089","ssdeep":"768:qXU8MMca080Hjkh5UyvucDYxhROs9SewPpUzSsLP20+6a7kHGQPLFODM:TI088a5bvuc0xys9SeSpU1Lu0+67mQhN","tlshash":"48e2c6cc7641b018a3a71176e1ef580fb37a2984980e8554a0aef5e43d7c4bd43abddd","size":33499,"data":"","first_seen":"2025-10-23T21:23:43.968949Z","last_seen":"2025-10-23T21:23:43.968949Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/CjIjlGq-.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"8536f2f542c30c3b37aa68fa9d57f5cb","sha1":"4679e0eb2b374266ccf64bfc73ac98dad5143a1d","sha256":"84a0b743a7ef37e6cd2a2db660b4b5899c3fecce9d1f28502709614fc9d191fa","sha512":"126dd430ac683507fae1c2a1e11c5ff94a9015441798342ca77791fe29709b30c33f8b30ff1b10b1f08b51fac27d016fed4b2f8e724afb82dd8b57c2fbc7fbfd","ssdeep":"768:kC43aMGeQtDCPB/HyzE0qct7yxP2C7dSlSxkPut06BcftOashQWEhQEq/iiB8faZ:760xiywcV64IX","tlshash":"e303f8c8b2a0506583e2a1a390750203f33999153409855cbb2ceefbad7eeda7177f75","size":40164,"data":"","first_seen":"2025-08-19T01:32:32.322521Z","last_seen":"2026-04-26T08:04:42.226428Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/55SCWfZf.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/55SCWfZf.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/l9CMu1bs.js\r\nCookie: __ddg8_=3RwUFnpbxrXG4Xdr; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=5sl1EODVJEEuEwIy; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-21c7\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 2751\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8647,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8646)","md5":"f5965e3e3b073337215714a0974cd349","sha1":"56d4b0838b90418da30686e5ba4a68b4e9a8d3b0","sha256":"53ad174e7a20b7f228efd953cd58f105159323c8bb8e035fe505aa3d1e786f4c","sha512":"a195104b8ba4de53a42388fc8aca93c98297af1d451d39a04d30eacd14b7aff3c6216f663a6af85be0d732d24ed07dad07ed6c90b5e2220fb46682defa902ca4","ssdeep":"192:KiFojMIZjkItgj6pnaJe/HA9iReMDjHMtpgCtAoRXSAd55rD1W55Jr0UWip8W4JQ:KiCMIZjy0LhYRHMAhPMN07i6jC","tlshash":"42024fde520a65b00bd706fa81e846d0d6b00448f04d997c64f8dddf477ec8917a6bbe","first_seen":"2025-10-23T21:23:42.957856Z","last_seen":"2025-10-23T21:23:42.957856Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/b3a22c28284e4de69efb358940838cb1.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/PragmaticPlay/b3a22c28284e4de69efb358940838cb1.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 22629\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"e063043198233d315d572492e46b0516\"\r\nlast-modified: Mon, 06 Jan 2025 19:17:17 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1851605C196F7B76\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 3443\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=peXtTbNvRBvbf4341Nkuzq68sMyVuivlnAJODkaOw%2FPfAGSEAokRKpSRPWIUXVhQP5zKRyR87qi7jRb0AACc2oo9L19paaquiztc1owZ\"}]}\r\nCF-RAY: 9933400e0953c716-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22629,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"e063043198233d315d572492e46b0516","sha1":"e719c1b648675987debfc36d652ad543a0104edd","sha256":"3890d4a4521ac5f03aa3f52073bb54ba382fab3d29dbc132a03b21d78041e596","sha512":"2fa66a1b86378d099a1a1dd6195c0859c4db448239089650d325030d3e1d9f40135507058032090002f10c29e8525417f4986e2bc3c52cda0c42115942009600","ssdeep":"384:dR1fjI9hXHBNC87F+rrzecc+93runTssJX+LoIjgyv8XeLJq+CNZBxKIgahpzf:b1fEBNL5CrzLCnYlb8XsJqTZBx1Rzzf","tlshash":"75a2e146cb23bad09ba52d5a6d84fa7b40cd95efcd0b29005125ef502d1e5e13dffa04","first_seen":"2025-03-21T05:40:08.943093Z","last_seen":"2026-02-25T19:06:54.159546Z","times_seen":31,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":240,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/vivogaming.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/vivogaming.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=UqcCnZ88BZOmZEkO; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-3fb0\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":16304,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d628100fa5d779e3b9bc129fa62172da","sha1":"f608ca7e628bb6851ce103666626b8dbeee8bd77","sha256":"3f26c9bcd48d8ed603f734858a6dcc490927aa3991bc5b2d5de26fb9bb82b632","sha512":"60c2da3dda597931491baedee8dc8d8ad2762e395f0e026ae3bbcfad216a1f0cefb951e36a372eff6396689f571c13e5221eb99ff94ac1ac7c8309d099d8887a","ssdeep":"384:sug5o71gg1u/CzY+xMQD2VOUWX/yUA3egn+1umMoHP:RLT1u/CzxxMwgOUgqUZg+1umXv","tlshash":"69724298f3e6f2a0e505f7f417299d79bf6a2cb63c23c96c0bfa0d94ea6251d4054843","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.873938Z","times_seen":80,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":145,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/js/fp2.min.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:20.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /js/fp2.min.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=9ZSoKAj7K7DPbray; __ddg10_=1761254540; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=3jv2dYijeCuAX2N2; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\n__ddg10_=1761254540; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nddg-cache-status: MISS,MISS\r\netag: W/\"68f899fd-883d\"\r\nage: 0\r\ncontent-length: 11347\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":34877,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (34698)","md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/logo.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:20.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=9ZSoKAj7K7DPbray; __ddg10_=1761254540; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=wwlfQkbcwgGwYWaD; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\n__ddg10_=1761254540; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:20 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-5f5\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1525,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"90c2e8c0d206d5eaeac1b5660a865926","sha1":"fe0386bf75d653fbacf2638c0dfe63544acc878b","sha256":"68da6ba7e3c1d4c39c888f4cfef2e3090ae95b091ef2b0bc1e6b638a3f2e523d","sha512":"1912a93b523c285d3ea1da9831b45240b5a6e5ddaacb2922b9b35c346beca192b37ce9881b7120fd215d1ff7087b732df496026f5bb49ae424ea1c27a0433545","ssdeep":"","tlshash":"c0315ee2b3a9d38191080f00834e7864032f15e9a710818ddbd76ba579b526fcc3d8d0","first_seen":"2024-12-10T17:19:34.101377Z","last_seen":"2026-05-26T01:50:54.168263Z","times_seen":69,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/js/pwa-load-event.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /js/pwa-load-event.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=nrh8Ho07bjRKfr0F; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=UQeX56cpbbz7kFFH; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nddg-cache-status: HIT,MISS\r\netag: W/\"68f899fd-177\"\r\nage: 2\r\ncontent-length: 211\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":375,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"f463b05f25296c1e185cc82087291f6e","sha1":"d15dfa009eaeeaaf36af83b20ace25714adbc583","sha256":"3f5bcf295bac81715b4413d640843ee19600f6a17c96503038c6a4193c331865","sha512":"5ecd0baa189383e24afadcbe391266fac63cdcdcb7da68ab1371168fae81f05f0140b4dcd86bc4cc59f4ebb3f5949e94b302f05de00942886fe3060436ae03bc","ssdeep":"","tlshash":"64e02b7483fc55b808e182b75f47bb15116721a77068d990c1871906f8d148780a2fd2","first_seen":"2024-08-19T15:07:41.99372Z","last_seen":"2026-04-15T02:03:05.836861Z","times_seen":94,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/sounds/click.mp3","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /sounds/click.mp3 HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=3GEQ9p5cNlWL2fLR; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=eBAasD6kbyVXouU5; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 6731\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: \"68f899fd-1a4b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":6731,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"b497ee5b7f24d5540859a2fe9a2f94a8","sha1":"402f32b8a0c59a6655cee008020948c8b0dc3878","sha256":"627e28dd820dbe208a2d764c086b4eca2c54330b9741073bec9da852aa592962","sha512":"1f0e4fd80c187354ac665cf7e3dc52b8834ef35022c6fe922db3aae0f89f8530c5e97aa2d4860f2351c8fbf05ea2252593d626d12b8f90865b7eca6b6a476ee9","ssdeep":"192:79qf6EhSf0IotHNKWliJRgFn0DsEZM8+h/wgMgl:79qf6ASfCtHtliJ2F6sEZMph/w1gl","tlshash":"cad16d6a6d478951e40c5570d8ce1b4c737824b5afb0b3daa267f79e00e536c12ceb29","first_seen":"2023-04-10T18:19:05Z","last_seen":"2026-06-26T20:23:29.963181Z","times_seen":1246,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Cpra5No-.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/Cpra5No-.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/CC-JJjPk.js\r\nCookie: __ddg8_=eBAasD6kbyVXouU5; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YA6GzXbieUPgkl99; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-818\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2072,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2071)","md5":"6226cb2d22b326927a2765b68336e068","sha1":"95f430c38c7ea4b3ba3995c409f064e1344fd2ff","sha256":"6534a7c4c2a002227501c23b401e2006983c5949ebfd72cf96d38057905488df","sha512":"f1e6c7b16dc52ed15160a60f19bf152933b4a025b151483eb7915c7e2b84c8c27b63e2fe332d714fa57a4eaa5e7a79b73facf92fa1a29ec3d4c3f44290eaf110","ssdeep":"","tlshash":"e441631cb87e993d417e58c7b128212863980ff890396adbb5f94c391b91c14f2aaf10","first_seen":"2025-10-23T21:23:42.978077Z","last_seen":"2025-10-23T21:23:42.978077Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_ipx/f_webp,avif\u0026densities_1,2,3/img/home/home-crash.webp","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_ipx/f_webp,avif\u0026densities_1,2,3/img/home/home-crash.webp HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=eBAasD6kbyVXouU5; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FFBv9ZymFEkSa9AN; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: image/webp\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests;, default-src 'none'\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\ncache-control: max-age=60, public, s-maxage=60\r\netag: \"7ea2-+itVziP3hlrfHUfVxnxcSrZpG0Q\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32418,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 868x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"06f712de8e75eae4f670f2658fac621c","sha1":"fa2b55ce23f7865adf1d47d5c67c5c4ab6691b44","sha256":"76009ad40ea26433da828503a60f5c0e7ed2b7fc6a085a70215f0374dba9d156","sha512":"013c795c4f03c96d227102824098ba859fe402064af6afef32e845c884723e8c1317757b23b529cb7f3e10e9d23d1d3edeb2952ee9c50e51cfb8539a40c2b63f","ssdeep":"768:5DwbhgUFshGzA3pVJ2jmthIZ+DrjptocteBsts189DhrIfN:5b/gzAZd9tDesialIF","tlshash":"d4e2f112b32e1e05a410bdd84638e776eb96f29ef41f5be725b8db4012764dc988f0d2","first_seen":"2025-08-09T06:39:58.844444Z","last_seen":"2026-03-01T21:47:53.337551Z","times_seen":34,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/Z5E5Sw3IjhEvUyTcnoFSDSJC7zRQMkM12xQAUJpl.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/Z5E5Sw3IjhEvUyTcnoFSDSJC7zRQMkM12xQAUJpl.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/webp\r\nContent-Length: 15552\r\nConnection: keep-alive\r\nlast-modified: Mon, 16 Jun 2025 16:57:29 GMT\r\nx-rgw-object-type: Normal\r\netag: \"11c305f0e9d521e138732cf29d002e0e\"\r\nx-amz-request-id: tx00000fed533a343116f4a-006867c79a-162bc1ae0-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15552,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 690x368, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"11c305f0e9d521e138732cf29d002e0e","sha1":"6fe2b708b0278d79d90d48cd56672c414c2f70fd","sha256":"5790103e502257194aac973accd2e010f3a2e80cf90b76bb478ff1b32daa8fe3","sha512":"70e8d9621f942c0f98bea6b4096279b9df9d1dffb249ccf96628a376cb113b19a499f7b661b403358347ca4c9d70aaf560265ecb84ef728fda7114892877386f","ssdeep":"384:gdESzwZpCosiOhC4TMDjCW7Ez2tIeeMxNYoxEpU:Uqgi34TufYzzeeMTEpU","tlshash":"0662d0a23076ea859e61fcee9d9c417cf68972014b07ef8114b39d556064210e7c6fbb","first_seen":"2025-09-09T11:33:29.028121Z","last_seen":"2026-01-21T08:18:57.100574Z","times_seen":24,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":216,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/apple-touch-icon.png","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=2WPsWoXnUqdW43Qo; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=vk9WCxXVkFug6JkZ; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 5476\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: \"68f899fd-1564\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5476,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"b0fd6219c3cc6542ac16de5fb1a803e5","sha1":"32e23eec5c195ebb1288a30e3eb88fabef54d68e","sha256":"3de26349c4bfab8a20055a516f6a01a3e26870922b5e158d25b222150248bb9f","sha512":"ca31b6c5eed2c86716e420501bba2bd940b0b74627e9acf6c535e1391dd518851aaa699484966b2c9b463af4b84fea8a91072966e6d355f12e7bbd7e04b724a8","ssdeep":"96:TitXRWWOLtp6cCMcakSchLRel2CgQ+dwmcwveg4tjvR8VRtvS:TUoWOLPIaihg29dwAv5Vi","tlshash":"b0b18db839459902eec1e13923565bd0af3111a036012c4a136fc9375b147a23abbfdd","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-06-26T20:23:29.98019Z","times_seen":156,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/9608ce90df8fc98075efc5535ff35f9f.png/OjAGuT337TJQJXoqI9NfPruOIfGk8mBMKwCsEGwH.jpg","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/9608ce90df8fc98075efc5535ff35f9f.png/OjAGuT337TJQJXoqI9NfPruOIfGk8mBMKwCsEGwH.jpg HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 46831\r\nConnection: keep-alive\r\nlast-modified: Fri, 02 Aug 2024 09:49:11 GMT\r\nx-rgw-object-type: Normal\r\netag: \"de82605db5c5d9b0d0c5ad27eecf03fa\"\r\nx-amz-request-id: tx00000e8b5f029de80aafa-006867c47e-162e91d26-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46831,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 610x400, components 3","md5":"de82605db5c5d9b0d0c5ad27eecf03fa","sha1":"511570e109f5d4b823e376eff632af7e4e3862e9","sha256":"4529d2cb6c5c9d0002f6cf0114cf36c40c4302d3914275a8a6920c90bad24759","sha512":"547e068accd60071532cfc2ea93bda9c696a67ae2617efd6d20f100d7ace2468a9a7b4181a20973598757701f304e060872edc639bfa177c987bf986e220f222","ssdeep":"768:kl4hEfWOPGNUbt/HKAqeXGnYx14/kDNnBQpPfOksbRuAVUWcLvz/I6rn9xVy:kgEfWDSZ/KABGYxGsDNnWZLwhUWcrNrk","tlshash":"2d230285b2da06044c98233354cd322d9df92797b9f68aec3b15b106c750da3bac674b","first_seen":"2025-03-26T02:25:21.35832Z","last_seen":"2026-04-05T20:02:46.558861Z","times_seen":56,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":145,"dns":55,"connect":30,"send":0,"wait":60,"receive":31,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/3ed8f052e200ffacc81df5daabb3dbdd.png/9A9SJ939FvAzBxWJ3u77f6zz6kK0TZDXB22GoeYs.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/3ed8f052e200ffacc81df5daabb3dbdd.png/9A9SJ939FvAzBxWJ3u77f6zz6kK0TZDXB22GoeYs.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 389413\r\nConnection: keep-alive\r\nlast-modified: Fri, 08 Aug 2025 11:28:28 GMT\r\nx-rgw-object-type: Normal\r\netag: \"dfc1e7cde485f39ed62bed099577fb92\"\r\nx-amz-request-id: tx0000032403d2265db0a50-006895df5d-16cc5ab24-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":389413,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGB, non-interlaced","md5":"dfc1e7cde485f39ed62bed099577fb92","sha1":"41338b843a96ed339b2f05ddcdab689ef5e55c57","sha256":"eed87c66b015a583b521693cce9debe242b24f10c32046be5f71396a299b5482","sha512":"aa4b17917d4f78f805a0245896cf636bd69f46ac4928dffe189a5233836737e17aedb853f2cf34597aae19a39e7edf81472de9ecbdaae47f49048b4aefd5ee6d","ssdeep":"6144:P4h49ms1Ac10FBAkSIkFhG6YMwKbAlEauHrX6wi9Dot3tscPRUaY3U:P4ams6TFBtSxo6YMTbsEaI769AdXjYk","tlshash":"528423a8e468ee14482fd80c763655e2f86f12be88cdd89decfdd385cd39b50485c5a2","first_seen":"2025-08-12T21:10:07.71221Z","last_seen":"2026-01-21T08:18:57.02594Z","times_seen":28,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":41,"connect":44,"send":0,"wait":84,"receive":149,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Icons.D23eBLyo.css","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/Icons.D23eBLyo.css HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=130fQvtvcvotkQjp; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=q0MNWepjgJ9foIVn; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-2ce\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 167\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":718,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (717)","md5":"a5d8beb06ee754b84b50f73ee1ef7404","sha1":"1aca8ff932d685db1952d3cf776d6e17b3829865","sha256":"1a20dcf2d19a1597891112fa69be000e980e4fb5406b70149588d0527da24e64","sha512":"802a67f83b4956d42e868bd89e6ef249c52087eae49154dadf54adeaf635778594355bbfb1b47b3558c9e348b276bd50e11816d6e47d6ad03de38c735a09ed68","ssdeep":"","tlshash":"0c01bc7d364af913532bde9e8288102391f367a7dd4909003ec32837b3626581a4f873","first_seen":"2025-10-09T03:35:18.358013Z","last_seen":"2025-11-10T22:08:33.978341Z","times_seen":9,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/vip/mainPage/star.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/vip/mainPage/star.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=Ns3gTHgj9bKaSgBE; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=TzpkDZrGrcgLt5CU; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-c33\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3123,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a52a0c3104e4ce6b3892f0cb079d27e","sha1":"9315a6cd602fb8d2477a0723f587307a43677cad","sha256":"49e08c929ab24a51bdc8935d0b1c7d8841abe3025755cc735640f3e10d218f87","sha512":"2db493ccaa35d93a4f7220c3c520057b9fea5d5cf79c7dd8faaa22e74e8b2ae3c7f839fcc3096a7c1c0d23e91fccbd800d98b2d679888a04972d7746ee368fcd","ssdeep":"","tlshash":"bc515af639ada9dd9c879264d3a95c900f3de1b4f11084699d8f0a31c09bcc6f5672c8","first_seen":"2025-08-09T06:39:58.898385Z","last_seen":"2026-03-01T21:47:53.493327Z","times_seen":39,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/2d90c08b7b6927b4a04aa1b58f6bc336/Novomatic/30d82faf1ef746fcaf3d759dc01b1bc1.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/2d90c08b7b6927b4a04aa1b58f6bc336/Novomatic/30d82faf1ef746fcaf3d759dc01b1bc1.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 30833\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"118a08c344cffc8d3ef51b984ea05af6\"\r\nlast-modified: Thu, 16 Oct 2025 14:31:33 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 186F392C468B880A\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 3280\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uh1zSa88%2Bxsayv4ejI3bHo%2Fuex12836AalBtcD0qjXsZdjU%2FFJpig0vJUBNBKKJ%2Bb1xbuZsRSNYt%2FoELwuN3N3EKJp70pUqSx%2FI0%2F9Ni\"}]}\r\nCF-RAY: 99339d14cc574f72-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30833,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"118a08c344cffc8d3ef51b984ea05af6","sha1":"bc2942fbf38181f212dcaca384be13468d76c9f9","sha256":"10ba1676f2d8e35a9f3e683babe519e7e76fd3118b31b739bcf5e191ca352b0c","sha512":"ad6d89f0ca3fad60746ca4d6da95fc8ba465b70bd6ed5979d14806fe88964f12668208ec9c36677f4257d4752edaa259d3543431894b6473a599900304f54ad6","ssdeep":"768:NNJH01qbmOP63Cxe+Av+Tmx9p+Tyf+r2Z2tWR0SP2v/+Yb:NNJHw8ms63Cxe+AHX2CZ2tWR0bv/1","tlshash":"84d2f1994c197d386ae4822320d2e54805925ce7da73921d7d30bdf5337b3ba63e782d","first_seen":"2025-10-20T13:01:38.512839Z","last_seen":"2025-10-23T21:23:42.993439Z","times_seen":2,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":220,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/igrosoft.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/igrosoft.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YpRHTr8nQhLCTxTT; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-58b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1419,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c43ac70a9fd5785f819f4698a2bb3155","sha1":"1f00e8258187554e29a427867e73d6586257652d","sha256":"5d85cb4f4b63095dbf40a563a99373d28a4dcf47336c5cb6ded8d1fb1785b45f","sha512":"5dfa7a065e4b139c9ac94456d3aafa832e03817e553b6f8feb33b798b2362d38ad663512955e553f6a4bc9004246d8823baac47b51c410acc4ce9604429d5a68","ssdeep":"","tlshash":"af2174b5a294c76cd004979c543ac629bad76abd7fefd40182c12002c1f41ed8d778d3","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.948492Z","times_seen":69,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/no_limit_city.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/no_limit_city.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ag51HMPfBr6Ifn9K; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-bf0\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3056,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9ff4deb92ced493fea0625b4d8f88d81","sha1":"5e693d82d776b8fb15ceb7afaa908579491479d7","sha256":"e343b9027a32c87e4aced50c8bb605bb6e9768ccaa141db8a8414db1e1b32e28","sha512":"59123620f973543ac8a08919e9f325f18c723e61c9e7a9d1a27675aa938267d43165ac48e7edb7a4705928d95b5f091dcd90d2732a28c6eb89e41469fc66e465","ssdeep":"","tlshash":"b1515677db4279178b92011f53eff9102f22964fedc2012b48c8a2d3398ec569c543ab","first_seen":"2023-07-23T18:22:18Z","last_seen":"2026-01-21T08:18:57.060083Z","times_seen":37,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Card.Cy-l_ghe.css","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/Card.Cy-l_ghe.css HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=x0UitSVpR8Zi2AfN; __ddg10_=1761254546; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=mFzJxhZraggNRIlE; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-124f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4687,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4686)","md5":"585b058c48f9aad8effd7f0806526e12","sha1":"b9db46fd5e2fda9309dcebbdc01abe77d5494a63","sha256":"302223b68c6b8059429c88f1d5da5e43910f99fc549cac6eab6bc36e1b273bb9","sha512":"007749c66ff643ef887b6d4f65dcddcab6d4ce7eadd3f3ff4c8388b801b4fe04dc1bee040e1bb3f9846eb33143985506274010929a3eca0131164802a24e14e1","ssdeep":"48:epZelKc4US1z1D31TKjf8hWNoMU60dnfnq+s7jtnWUUnCRUVVEZSVC/gVKi7dV7a:erDMbdhWBj/gixwYRVW","tlshash":"cda1ee1039b83076b5bbe4af6cc21c8f258cba17f573429a9523e464c4af44765f43d9","first_seen":"2025-08-29T06:11:20.789412Z","last_seen":"2025-11-28T02:25:21.126039Z","times_seen":19,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/geo_ip","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /api/geo_ip HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=SOPk0o2V5SJR9Y5X; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg1_=pdcKefuUnJqPJS9DVCYu; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 0cd23168-0913-4ac9-b2f2-4d08bec19d29\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0073ad9527cf6dd1a48b8a6d4300e520","sha1":"307247cc14c7ef999988ee33050e374276a92369","sha256":"f3a9842e1eec7f2cc3788c0810c887345bd0665f3d03c0af08f7d579c97e9932","sha512":"7bbe737628545d6d15af6bf75ed0ad789ef12d679d79ac0c4345d22894a269da1733400a90cbac64407f6cac34aadb38fe678176e0f20495fd4441fa86f01dd5","ssdeep":"","tlshash":"18d0a71d34b99c2e0c7dc380492de34b67253116d28e565b81a28f21c0c47ed2060017","first_seen":"2025-10-20T13:01:38.561519Z","last_seen":"2025-11-10T22:08:33.982386Z","times_seen":4,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DrBHzM4U.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/DrBHzM4U.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/CC-JJjPk.js\r\nCookie: __ddg8_=kXuItyf5t0D6HwUo; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=tABJcCJYXhk3vmhZ; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nddg-cache-status: HIT,MISS\r\netag: W/\"68f899fd-200\"\r\nage: 0\r\ncontent-length: 330\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":512,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (511)","md5":"81dc95a0ae7621ff9376cdd187ab5139","sha1":"6110c5ab1569e7654b8c15a010c9fcedf58021f0","sha256":"cb5b291c7af986c91e97a23bca15fdbdd5f22e4e195d3f6f2e01c07ae0b9a4c3","sha512":"a6304116d77607a747e3e142e404e06808491894cd86aa56a3da4766f8e36bf47b0ab64938ed7bafb707d3fd2f5aaf53bc8f397be35d055d9a221473762786eb","ssdeep":"","tlshash":"cdf09e8e70a3d2b0b736d789c937d542e07c1e93390de5d1d44a5a45324b481e73d75e","first_seen":"2025-10-23T21:23:43.001964Z","last_seen":"2025-10-23T21:23:43.001964Z","times_seen":1,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/dVX510Ng.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/dVX510Ng.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/CC-JJjPk.js\r\nCookie: __ddg8_=kXuItyf5t0D6HwUo; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=CJZmIt4iTHWNTpFc; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 350\r\nddg-cache-status: MISS,MISS\r\netag: \"68f899fd-39e\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":926,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (925)","md5":"8c045b697e2fbc875efe89685afc7eee","sha1":"491a9e3c5e67694b82126638f628546711374ccd","sha256":"76b73ee8347f7127a9dc899932051c7d08ada047897f222360ce008700993f0e","sha512":"50db89683709b1df2e5d95127dce746509c2ea3cc0cb9e53ff7aadeac6e93513436d5ca47c11898fbd45b97ebf4e27ef3142fe85007e1d133e35261cb6a673d9","ssdeep":"","tlshash":"9111344e90351e9dd06ccfba806af38330209dbb2713e0597919d1a53eda4034d28f32","first_seen":"2025-10-23T21:23:43.003111Z","last_seen":"2025-10-23T21:23:43.003111Z","times_seen":1,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/vip/mainPage/bg.webp","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/vip/mainPage/bg.webp HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/Home.COQPz2RO.css\r\nCookie: __ddg8_=Ns3gTHgj9bKaSgBE; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=TSrHvrSbN7hteww4; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45556\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: \"68f899fd-b1f4\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45556,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e39774d542e18edf4cfa36d04cac809a","sha1":"1861275d48a7be8ed8e03c06490ee02bde83b69a","sha256":"82c6d25a57ecbc14b8e3a4fff7bb25120f682501ed9b6e82a914e83952ab2429","sha512":"5055dc2080e22142fd134adcd8fd334b4c6b5b36e859afbbf49b43a680fec8abb711339dda4c1d44386f0e2b8aefb1ebe7a05df04f030117acbc9836e8c3c771","ssdeep":"768:YwAhH15qKerR/sXK+oRPl955n7wKiV3tfidYKNt6jb5mUbFuQgyTvmWAZwO4vRf:HALUcXEnrxwKkfihD63zMyKWAeO4v1","tlshash":"a313e0c05342605ebf48a97e7fdf0096443a6dc417ba80f299638b157fb3934ba71a78","first_seen":"2025-08-09T06:39:58.842762Z","last_seen":"2026-04-06T22:48:49.739794Z","times_seen":58,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_ipx/f_webp,avif\u0026densities_1,2,3/img/home/home-aviatrix.webp","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_ipx/f_webp,avif\u0026densities_1,2,3/img/home/home-aviatrix.webp HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=eBAasD6kbyVXouU5; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=lYdZpY68VHEmqlsY; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ndate: Thu, 23 Oct 2025 21:22:25 GMT\r\ncontent-type: image/webp\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests;, default-src 'none'\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\ncache-control: max-age=60, public, s-maxage=60\r\netag: \"df4e-8g5e5fp1T6nH5M79+ovDyRTiklM\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":57166,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1830x1200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e69a9f84442238c66e229878fc2cc7d9","sha1":"f20e5ee5fa754fa9c7e4cefdfa8bc3c914e29253","sha256":"9417ec88d0bd6956206142d851a40e6665defe12075717688956e37c69a91c1a","sha512":"06ffc8a6aefc0541b85f45c28c1f995e03a2010ea2cc4e9a26e523287bbc2b3fed413e0d5c0d624a1b4688364a80b75c4a46dede2d211c068bc5c7ece6758648","ssdeep":"1536:ySYwoYfrg0RY+cL+JTan7h7/TKnWpe8uud2/nw4bih91jI:yTFw35cL+w7F/WnvAI/nw4W3dI","tlshash":"6143f1fc08f41f62a4c6a62f54b57c8903b412a7de62646b340a1c13c6e6d370fa3a7d","first_seen":"2025-08-09T06:39:58.867511Z","last_seen":"2026-03-01T21:47:53.513864Z","times_seen":34,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/19ac27414bf7761bbace0a39fa6d5c86.png/BokmRgz67SsEi82eJZwIsjAhMv5UBuRWwFBFk9Vo.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/19ac27414bf7761bbace0a39fa6d5c86.png/BokmRgz67SsEi82eJZwIsjAhMv5UBuRWwFBFk9Vo.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 420758\r\nConnection: keep-alive\r\nlast-modified: Tue, 04 Feb 2025 17:00:37 GMT\r\nx-rgw-object-type: Normal\r\netag: \"bbd8855d1093224effdf10cbc8f67c96\"\r\nx-amz-request-id: tx00000dbb58a13e82597a2-006867c600-162e91d58-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":420758,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"bbd8855d1093224effdf10cbc8f67c96","sha1":"e29b9612acff5416f51e635c1b1244cc90a8d188","sha256":"14ff994ab95587962a16dc1c6b3a85f55130d475329f687bfa3c69ce958f6478","sha512":"daccb10808b818cf777e49d7672b78ae80c5c02ca162ebd05ba8f4e86dc56c0de9514400cc52a2bbd926e262ce8fda78dbefb6848cfcb8cb944d6ac696bcc00d","ssdeep":"6144:xlGPwkyjp5zHNk0s/d4WFzpX7YcdFt9XB8FRBF5r4bTlJ3OZX6LPGEYmmkuIhrje:eTQrHTUd4WzYaFXGF5r4vsXWCOuIle","tlshash":"2494231ee511f3f2d802d9b8d75ee8307c3c68641e86b00ed6ad9ee82931d671905a3f","first_seen":"2025-09-09T11:33:28.966177Z","last_seen":"2026-03-01T21:47:53.278986Z","times_seen":26,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":47,"connect":30,"send":0,"wait":59,"receive":101,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VRDLWS0SHC\u0026cx=c\u0026gtm=4e5am1h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-VRDLWS0SHC\u0026cx=c\u0026gtm=4e5am1h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\nexpires: Thu, 23 Oct 2025 21:22:23 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 130798\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":378480,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"430709ceedf12ba29b30f0307b1d252a","sha1":"e9a7a649c3fb8bcc40cb45a16f8191cb611f7886","sha256":"fababc5a8c0fd6968e768de90093b9dc21a6cb01d997fcdef1b73d3193e0969d","sha512":"1e408444526098b172fc1c553ab3bd27f873e17392ac9117f37f3cb96fbd2ce7b52d9d687986daf4304502f5d8a73a5ef05d68e71f64d98dc66c56504636d114","ssdeep":"6144:AkyJBX1Q8429Z8nP57wr/s0s/+Kxxc20hYlGVOKlhDjkA:WJBli29Z8nP58DG/mYlsF","tlshash":"558418cd73d670669396e478503f018ba57b29a2f44cc895f18acce42e74a9a4277f3c","first_seen":"2025-10-23T21:23:43.00802Z","last_seen":"2025-10-23T21:23:43.00802Z","times_seen":1,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/api/v3/welcome-pack/get-welcome-packs-guest","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /api/api/v3/welcome-pack/get-welcome-packs-guest HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ovlIPfIKP3EKUqWf; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg1_=U6oh7IsK6kLJZa7SKJXj; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: b9c8445d-78e1-4bbe-a173-6cfe52e73f93\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":10498,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"df341507ff8dee1dec6cfc6fb765d9b2","sha1":"25fc6b655e84e76c017b03968a52293a21695d60","sha256":"c19561c00f0f1c48cb11ff4810a401f1f9587e36f804e9d8227c505571975da4","sha512":"d168b03b9696e1d48db5aa735dfe9144e78b9f7ba5e1fd36c7dced0fb622c35a32672e03db4c1efcabfb54835217b7c06dd20710c7d9c15a05aa15e41fe2f664","ssdeep":"192:2ACnA5CiLs8CN+Xj4CIMqcCbCB0eAv0mI7e3/rgd1YyT:JCA5Cz8CEXj4CLqcCmMrgXB","tlshash":"ef2220e288f61a6c199e36e3da72bddc38e43145e160c773fc7e6a07d3006619a51b26","first_seen":"2025-10-20T13:01:38.565383Z","last_seen":"2025-10-23T21:23:43.009756Z","times_seen":2,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/icons.CBEgwkkS.woff2?v=1629439516391","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/icons.CBEgwkkS.woff2?v=1629439516391 HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=3GEQ9p5cNlWL2fLR; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=bmVr3qSstdvtnSi5; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 9324\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: \"68f899fd-246c\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9324, version 1.0","md5":"fda09e7500d3a2867129d2ed80c57583","sha1":"d871428e4c47c45f3cd7232c489442943ed079ac","sha256":"fae8a414803516ee3ce7076358411be3ab4fdf1f68c8b9dee7e76802bd3aefc9","sha512":"94bae208ea5a0b8b9a6c04bd845247c59503852b42c32fa1a8e5833859dd963d3a1b26da5d3362babb5185206de0c05380fb3be080229284555f2e81d9f96485","ssdeep":"192:XlV9RVDfOg6KUzP++NzEsfO/aL+rNHxUQqj/qzT5SlrDuZYoh0:VV9RhfZ6DzP++tEsW/G+rNHxUQq2RAmW","tlshash":"8112cfbfb53be2a1e0f27d78141adb5259df317842fd0b781006313567f4b65a042532","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-06-26T20:23:29.819246Z","times_seen":134,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":94,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Button.DTPpyI1-.css","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/Button.DTPpyI1-.css HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=x0UitSVpR8Zi2AfN; __ddg10_=1761254546; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YtmMb4a8Tpv5QOTz; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-138\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":312,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (311)","md5":"ecb5497c9d606aaba293842f9e63c4ac","sha1":"9cf5b1183d17892eff339197955134eb5967d322","sha256":"c2df52a8abdfa5e9d3546c8212b79113166c3e151ffbe2c872fec1d172939fcc","sha512":"d99d5c45bfffe0cdb84c2e92e49d34035e0adf02f955a72bbe879ca0944120c25bd0cf7f2556917a6f9d804fc702d4f7fca5cacb93a332800cd4fb23c2ca7521","ssdeep":"","tlshash":"b5e0cdb1ebc8734a3737d084b445034156635b779071364d69d173f599db452332f1a3","first_seen":"2024-05-07T05:57:01Z","last_seen":"2025-11-28T02:25:21.328929Z","times_seen":31,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/CC-JJjPk.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/CC-JJjPk.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/Razus-0y.js\r\nCookie: __ddg8_=nrh8Ho07bjRKfr0F; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=eWbPPDBxDSIiyEzE; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-length: 76306\r\nddg-cache-status: MISS,MISS\r\netag: \"68f899fd-38767\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":231271,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (61957)","md5":"28faa779be2eb7b8820b07d8364f1eea","sha1":"ee2d07668314c256c7c26c3531e2fe82ed511087","sha256":"9eefadf32e1a98480d9da65562ac10e5e51d51c52ee48180ce3db466a5e98c98","sha512":"d7e69e010e34f5575f658508b4cb97b9ebcc429045f3bd95211eb29a222a519a914b059ab8bb64cd800977d05770fb0fa2f1ca1845fe18f86cd920aac99c81d4","ssdeep":"1536:olSpUnKbSKnQuJnXHrxAOwTlWupr+iLxa1EzQ3WIO8zrSouwRp02DnkS459rS9pD:W4UnSQWuh+WHzIutcjGmf3xKs","tlshash":"50346caef38991fde11b8bd49047741431652ffea281c85282fc5d04272a8fc57ede6a","first_seen":"2025-10-23T21:23:43.016832Z","last_seen":"2025-10-23T21:23:43.016832Z","times_seen":1,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/CC-JJjPk.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/CC-JJjPk.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=82yFQzxAXCtyCkhF; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7tChrYS507NHdwk3; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-length: 76306\r\nddg-cache-status: HIT,MISS\r\netag: \"68f899fd-38767\"\r\nage: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":231271,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (61957)","md5":"28faa779be2eb7b8820b07d8364f1eea","sha1":"ee2d07668314c256c7c26c3531e2fe82ed511087","sha256":"9eefadf32e1a98480d9da65562ac10e5e51d51c52ee48180ce3db466a5e98c98","sha512":"d7e69e010e34f5575f658508b4cb97b9ebcc429045f3bd95211eb29a222a519a914b059ab8bb64cd800977d05770fb0fa2f1ca1845fe18f86cd920aac99c81d4","ssdeep":"1536:olSpUnKbSKnQuJnXHrxAOwTlWupr+iLxa1EzQ3WIO8zrSouwRp02DnkS459rS9pD:W4UnSQWuh+WHzIutcjGmf3xKs","tlshash":"50346caef38991fde11b8bd49047741431652ffea281c85282fc5d04272a8fc57ede6a","first_seen":"2025-10-23T21:23:43.016832Z","last_seen":"2025-10-23T21:23:43.016832Z","times_seen":1,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/home/play-icon.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/home/play-icon.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/Home.COQPz2RO.css\r\nCookie: __ddg8_=Ns3gTHgj9bKaSgBE; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7strnUqB1pe4Lf72; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-564\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1380,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"89eda723c8dba836950c26b67cd04524","sha1":"9f3e34d6eb95f2e0b5fc9da99bc3928d70302684","sha256":"6d7e4782409131c0723e253d83d2849be4634cbefdf9d2ae6c5ad0cec9b08a32","sha512":"bc29d80eb47fc508f60d1e6aa660bea59af4ac72c608fb52c4b11b18712da727706b0029a25bb58d525e2031e9b69bb0f12664dae2514b85a222281d605c1768","ssdeep":"","tlshash":"b621823cd25c5c7bdb67827cda195465221e13de63c9431c7198df1e18344cb690fae4","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-04-15T02:03:05.921793Z","times_seen":79,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/l/v/poll?action=poll","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:37.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"POST /l/v/poll?action=poll HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.gwcz87x.life/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 217\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:37 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 2\r\nConnection: keep-alive\r\nX-Webim-Version: 10.7.130\r\nAccess-Control-Allow-Origin: *\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-07-27T15:01:33.050347Z","times_seen":750898,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/cryptojs-aes.min.js?v=1","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /cryptojs-aes.min.js?v=1 HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=nrh8Ho07bjRKfr0F; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=WFx8HMPSX8YTSnvk; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-359a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 4790\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13722,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (629)","md5":"cd93b7f0987a614bc17698503bcb6af9","sha1":"68a66448326499ff34c75bf31e2769b278584e0c","sha256":"8d4fae1a37a5b5338c889d0897b50024194b4d3ae94940e7e42c1c1423a1183e","sha512":"e3b87dfe10c0e3f3d801a85ae9c654a74eac22c2a93a757568a0d2b13755c36aeb5f9337e94a21db4ef2d1f0f1cfb98fccbbb0151d5cdf8d967730df96bfde98","ssdeep":"192:9BIGDmDm90mP9z8Ui015lN1I5rI2Tru6hMJFmHV+mdpwIfyAaYfKnNVYkUUFJZm3:9yiB0ez8UiIX1SrTegsEHJuI+y8Z7AX","tlshash":"625297c936edb94263963028587f6017b86b28b6945c4824f29cd4ddff9899dc03ae3c","first_seen":"2024-11-30T18:08:34.076577Z","last_seen":"2026-06-26T20:23:29.818692Z","times_seen":1206,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/CMD09m2L.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/CMD09m2L.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/CC-JJjPk.js\r\nCookie: __ddg8_=kXuItyf5t0D6HwUo; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; __tld__=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=akA87L47HYV7U08A; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nddg-cache-status: MISS,MISS\r\netag: \"68f899fd-4b83\"\r\nage: 0\r\ncontent-length: 7902\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19331,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19330)","md5":"82423b47211ad4437db92979eba6c01d","sha1":"06f1d0a7d4d7a5f08c1b559a2d582df671cc8b5e","sha256":"a20ab53b077b13d10e8758e21cd9ab29854d296088394ef8493aa15127eb79ca","sha512":"cd65066973315f44799a89c1124c2c0d67114d8f3d1be4c8d28815b77845394c06f453ec390f62deba58e4c7a5a04991747df9fb42498c4c02848f1435c4d477","ssdeep":"384:/bLmDw0GjHIVo6eR6o1Shl449OsLV5jbHQ6NhWWxZ9HqDXRoOkm4Zes:/PmDw0MHIVo64X1NdshJTQ63WUG4h","tlshash":"439295c832c7f5968793197681bf100bb23e6d85a40d8892d53ae0d97c7486c867bfed","first_seen":"2025-10-23T21:23:43.023608Z","last_seen":"2025-10-23T21:23:43.023608Z","times_seen":1,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/roboto-regular.BtWrZLw2.woff","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/roboto-regular.BtWrZLw2.woff HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=ZjxJBk6wrzOAHxNd; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Ra8NRafpFAepxQF4; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: font/woff\r\ncontent-length: 139160\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: \"68f899fd-21f98\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":139160,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 139160, version 1.0","md5":"ae91f35c10375f1dab7137a298aba7c9","sha1":"6b9aae9dddb20bdfc56381f0d64bf54433977413","sha256":"264a621481c81a289ac3227cd63cc91902de13789dd9df920f0e2f465fa2bd38","sha512":"b0253e74fe7baf39316ec12622b1ace4899c51f6ce5c193e0ca2dbf713e4e1ce3d5ed4145d46680a91c68baa44bd73a31834e544c0d732f77975e72424151b60","ssdeep":"3072:2isY+Dpc1q2EHUmPsBut5j+mN9s+EIUb0Psp45nE:Tspc1s0osS5rc0Er","tlshash":"60d31255eb38110ff8be77f86dcad33408f471d5c7a322a4955802abae44fd4ea24da1","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-03-01T21:47:53.345572Z","times_seen":69,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DFtZ4fYS.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/DFtZ4fYS.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/l9CMu1bs.js\r\nCookie: __ddg8_=3RwUFnpbxrXG4Xdr; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=6mzQosmMtOe0FaWd; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-56\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 84\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"8bdbd6d5d35121cd3c33a24e21a9d55b","sha1":"9bcc4eb3a0c4aecded95bc230758d9dc988880b9","sha256":"dfbbafadc7eb81d0ee5b4e3a3c261742d6e9af3f3a080f8b42b39ec7dc174123","sha512":"df4884ab9fab95df5cc647697d408a807387d54b2f4184bc25cd08fc935313c649594b0677102164a562f9cd1b750ecd784d03b99dada11cc09b3c0ec1578e86","ssdeep":"","tlshash":"b0a0120a0450007d100818e8a70fb06985b0186713790a8000044e020b194de990dd00","first_seen":"2025-10-23T21:23:43.026089Z","last_seen":"2025-10-23T21:23:43.026089Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/2aiJixXn.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/2aiJixXn.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/l9CMu1bs.js\r\nCookie: __ddg8_=3RwUFnpbxrXG4Xdr; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=82yFQzxAXCtyCkhF; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-fe3\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 1470\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4067,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4066)","md5":"76b8fd495e680a729f98510d28ad379b","sha1":"5b04fc21d8c1ea03a84de09a1a0601b6155a82b1","sha256":"7da141faaa2caf6683cb25f3649578c06b4c8f869d54380ed15f4fbe5ce20018","sha512":"c0f12511ca0ffba201aa03038793154cf733272a42d6de313986ec10e1afd86f33ea49bd86f9f9c9c39f8f95d156908de23fe5c2795cc00f8952d9dc0ad50978","ssdeep":"","tlshash":"5e81528b1241b63a7ede434693f8541857304442700d7bfcb0ef8d38aa6ec86617fa70","first_seen":"2025-10-23T21:23:43.027704Z","last_seen":"2025-10-23T21:23:43.027704Z","times_seen":1,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/Hacksawgaming/7ff508ea230f4c88b025ef32692dbcd7.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/Hacksawgaming/7ff508ea230f4c88b025ef32692dbcd7.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 31746\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"237c00d350be36d52956b2870e1dd118\"\r\nlast-modified: Thu, 17 Aug 2023 09:36:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 185169DABEAFE771\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 2036\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9JOUucizPx0bZ72HOm5GmJYICtQMrY9Xs8D3MU9KznGkbnDmYJjOGjHvSjNnIGYxP9RIBZ%2FHvCE%2F9fwJOt%2BPjTqtSGafObTDT2lqQ9br\"}]}\r\nCF-RAY: 99341253a9b59707-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31746,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"237c00d350be36d52956b2870e1dd118","sha1":"6a30519470a594318fcfc9189851c37d7e3e1da9","sha256":"ff25df0fe6236a03a268ed69367ef6fc79c1e5283d81da2d26e44d3b869af692","sha512":"1018378232cb766b86b5c4aba4aa0557c47aaac0b2a3075184738e875d3faefdeae0ea278fd6ef5c58037c1bf2725c6a49d44dc52b5ad02cd1fa004db180cf36","ssdeep":"768:MMK5EPmyBS7iGhIv+gcA3XoBgIOzLTozciOFmnQ:MMEEPmyBSLhIvX5XlIiViOInQ","tlshash":"37e2f11334c5deb51492ce37a469334208cba9bf8cd82486bb5d85ca44fff51609e827","first_seen":"2023-12-13T17:48:16Z","last_seen":"2026-06-05T18:43:38.64275Z","times_seen":64,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":40,"connect":48,"send":0,"wait":85,"receive":2,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Cd3qlZHf.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/Cd3qlZHf.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/l9CMu1bs.js\r\nCookie: __ddg8_=3RwUFnpbxrXG4Xdr; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=UrXj6HLEVfaBJU1m; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-11d\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 204\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":285,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"42fdd9f375ea0d9fbf23777bff652e0d","sha1":"deadc58e0db0e97e1379826ae88307b9449713e8","sha256":"8a0caa861093457d8fded651e5e99e76d36950d2a0e756c0dd713dde5c10b82e","sha512":"753cb793aa400055e3559a136b78082de077fc4347c27009270ef18e37fe077775a108586d02dd0de4d732e498056582848bea84982a1e87a781b9f9668b18ad","ssdeep":"","tlshash":"08d0c2ceea7065b8ba04455d945be662c634b90012986ac0987b5ea12f149c68246fd6","first_seen":"2025-10-23T21:23:43.032949Z","last_seen":"2025-10-23T21:23:43.032949Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/js/fp2.min.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /js/fp2.min.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=nrh8Ho07bjRKfr0F; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=BEqmQthSAo0zsVfh; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nddg-cache-status: HIT,MISS\r\netag: W/\"68f899fd-883d\"\r\nage: 2\r\ncontent-length: 11347\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34877,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (34698)","md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/footer/lvlx/default.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/footer/lvlx/default.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/default.p4T8Rkj0.css\r\nCookie: __ddg8_=Ns3gTHgj9bKaSgBE; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OutGpFQ9CQG1Bjmp; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-131f4\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78324,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"861bc0fbfe9e67f911533676dcdc95e4","sha1":"711166d32abc201afa9c14ff03b0cb98d4e4e35b","sha256":"df69d312fe8509a839802cd82fbea21cd863aaa4ce8ffa08c99fe0cc19cf2356","sha512":"1688c6f57916f56a146dc129ffaa617cc9e74eff2c46b431edbf8a643fd3f2bb81579afbfac3ef3f5f7d4049e452ba0966ca24b3481433438c32e5e56aed7648","ssdeep":"1536:wc/a8s+S0v+DRGkZHWQwaESSt7hSZBwmsAuppsPV+HJM33iM:5TK0TJ4Zmm10q","tlshash":"e273c7dc6bb405f0dec593daae2908a97c2765fe2d815d28c21c5f842ca1e6ccc65dca","first_seen":"2025-08-09T06:39:59.049635Z","last_seen":"2026-04-15T02:03:05.856061Z","times_seen":68,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DciDYpZH.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:28.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/DciDYpZH.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/Razus-0y.js\r\nCookie: __ddg8_=quQJlsAc1g4dyXDJ; __ddg10_=1761254548; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ImUIKNazziRy2Q9B; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg10_=1761254548; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-c89\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3209,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3195)","md5":"e04267964b68eb70e66437b837ab36a2","sha1":"6dc1fb193384c8ab6d7f904682ffec5cbcdd53ba","sha256":"0394983d90cb0d3f196e2dbe6fda55b10eb96916273457ca0a387ee154b51b22","sha512":"e13ce273f1144f1976ac76a7955ac02640eec8e4c8a80304573dabee28c28b86b19468c863519294469f5b9c6475eee63e1c22fa5e88593d38f84bca3f1e8eb8","ssdeep":"","tlshash":"bf61c50df13598be71286cdae67b0347232239c33ef8c4a0a11e5d4bb704993c697721","first_seen":"2025-10-23T21:23:43.038912Z","last_seen":"2025-10-23T21:23:43.038912Z","times_seen":1,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/yjFwyy9d.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/yjFwyy9d.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/l9CMu1bs.js\r\nCookie: __ddg8_=3RwUFnpbxrXG4Xdr; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2aXvK7nOfHKEqpNo; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-103\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 198\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":259,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"60567b3b407a58df12f8e745e33b9cfd","sha1":"4549a829818d68f0dbbf0ea5bca2e52291873c63","sha256":"29075600aa13f0683bc29f92ee81468b04021e89f44e393d524fa32bda9a018b","sha512":"39ffb96b3b8d509d32e63953f5037f58bc144ff4881cc5e48933ca56c014c0195ca607db8c41de0dbb860a5b84c53a08eeea53318fb7f801edf06590e6e818bb","ssdeep":"","tlshash":"94d0955d5033d1b45575056904db0d06d14754bd333063246066fb7467a84d28b4fd05","first_seen":"2025-10-23T21:23:43.040548Z","last_seen":"2025-10-23T21:23:43.040548Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/ext/cdp-customer//v1/analytics-js/ajs-destination.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /ext/cdp-customer//v1/analytics-js/ajs-destination.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=61Sq9Zyeg77CvLId; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=j4lfNxdNaKWI7Dpy; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\netag: W/70a1cd6d5c300a59c3b828b336627efe\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: public,max-age=300,immutable, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nservice-worker-allowed: off\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":9226,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9226), with no line terminators","md5":"ecdb24cdd6b5a3a4a7ba31895f79ca4b","sha1":"3284a1f3ba7aa68b324499a64bf32c8101701663","sha256":"ef949bb08ab368c25ce835e54a53b3eb842de7e868ff81ff99520ed16394637d","sha512":"e76cf7a6f407f484c5537258129ee7d29b765a14204c0cd4e1ee9ca3d9542ac01c5c0b0c557e704d8c69a1a12b29312b99ec0fd25608af07b3c79ea5a83d0492","ssdeep":"192:d61F3JpeOVXIhCBnMfJlUEpFX8nmuONy+2Yn:doF9TMsEzZuF+2Yn","tlshash":"5f1212ccf6c7f0055267bab5817b451ab33ebd1a244a4894f42bcdd5287c619a12bf38","first_seen":"2025-06-01T15:05:10.790294Z","last_seen":"2025-12-16T16:58:04.809767Z","times_seen":521,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/api/v2/banners/main","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /api/api/v2/banners/main HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FAjw88qnyVVsnzsT; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg1_=4NCiOZNlyLxXi4aZjswN; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 26af7e61-5a42-4b70-a175-3edf62d97c87\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17233,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"caa9075e5a39c3b8f9a8f174fec41ce2","sha1":"5ca942ddb803683adb4eb73b489c1ee0c4d73e4a","sha256":"3a6600b97c5174a4f0b7a46bbbc9eb9cba0443e538ba7e39d62b6fd22431d815","sha512":"a3cd51506d325f6c2ff158af1605f12088423ea78730336491e522c072234c761b95fbce9dc9922eaeb69bf6a4ae56928ce6c49c2a950ed9963f8449156051de","ssdeep":"192:yz+O0P1UJRRhhJcmTxciInIy8zpEjh7eupjoo7Lfq+Y4YA7+R656H78R1Fwk:0+O8UEbVY4YA7aUV","tlshash":"fb7211d2d6bc46ad1ad831c6cebbbd8c309c2505e148efb3ee2ed55bd0191a1d51834e","first_seen":"2025-10-23T21:23:43.046984Z","last_seen":"2025-10-23T21:23:43.046984Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Bmu-_7RT.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/Bmu-_7RT.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/CC-JJjPk.js\r\nCookie: __ddg8_=kXuItyf5t0D6HwUo; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Ozl5rqCKb84VhBoH; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nddg-cache-status: MISS,MISS\r\netag: \"68f899fd-997\"\r\nage: 0\r\ncontent-length: 875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2455,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2388)","md5":"399bb60440452544c57c7b0d7b2fb019","sha1":"49caf156d98e1f9500f7f58394096bb6d92c2520","sha256":"4bb8c18c68339e6e1ec3cb6deccfede1522847a36395267475d06cfef8d5e05e","sha512":"c2060832374ad849da4192f3ac5c83ec26fafb81b8ea65b1b015496cb3694ff43ff9bdf6ccf1998b579f730359d3fd0bd59522fdf4cfc839e5e0ebab637f7746","ssdeep":"","tlshash":"2b511f2a7eda50311a292830e0da51639006dad11d1dc721b9204eed7a66e528db6fef","first_seen":"2025-10-23T21:23:43.048953Z","last_seen":"2025-10-23T21:23:43.048953Z","times_seen":1,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/locales/ru.png","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/locales/ru.png HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=y8mcLihooYsACKeY; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fg3VFqL8uZf3daK2; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 881\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: \"68f899fd-371\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":881,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"5b388e83adf41a4fc264e5f31af4ba2c","sha1":"d1baf6207b71fee26681803f534cd6af7c5fa379","sha256":"2b9d3c1f709b46aecdc68c684a3095d535e67a9333a180b0b8a71499c6297356","sha512":"5a862da94fe837e8131d94e7629e99fafd4769a049a632f2d975c8af352858d488932118c6b4b4c45f80f06d64b02f7b1847e2d6438be358f6d71ac6411a08e9","ssdeep":"","tlshash":"5a1123a3855eca2ce4577b3c46eb92427c4e60261e562999f418cef92c560543046771","first_seen":"2025-08-09T06:39:58.929564Z","last_seen":"2026-06-06T23:27:45.150726Z","times_seen":113,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/13892c6beb22da0ad6b5e8799d41c75b.png/lKWsaNTjFKCYsfM66PKuEuIGdjqOJUwOhKdtHpyl.jpg","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/13892c6beb22da0ad6b5e8799d41c75b.png/lKWsaNTjFKCYsfM66PKuEuIGdjqOJUwOhKdtHpyl.jpg HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 338518\r\nConnection: keep-alive\r\nlast-modified: Thu, 30 Jan 2025 11:14:47 GMT\r\nx-rgw-object-type: Normal\r\netag: \"4918b6afcf7183be64c4edf328076bcb\"\r\nx-amz-request-id: tx000006e668fcb653c6ccf-006867c463-1639b45fb-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":338518,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, software=Adobe Photoshop CC 2019 (Windows)], progressive, precision 8, 610x400, components 3","md5":"4918b6afcf7183be64c4edf328076bcb","sha1":"799a8f4abb76b7d28f208090d9203e17e2f27e36","sha256":"e9eddd1ae4e3ccaf93f70b69744dde149e4a2275c7aaffa4f854390e490cad97","sha512":"b05a896e7fa2fc6ac0bc79fb42fd18ae77cfe8b4f91b268b78fd0cb8cc76db6fc42e470c73fa46eef89a889626a2ccbd88fd7094189e09bec945b48abd12e319","ssdeep":"6144:45QorbeIDU2zy9YtJClf64pSLldGAYcvO0PMN6s8+1WDdG1nYh3m:4xrqIDrkfRNAfOUMd1WU1nYh2","tlshash":"28742373cb806636eec40f0478dae8c44d161ad652dca04cbd1fe849ebd9a79b21534e","first_seen":"2025-08-09T06:39:58.884513Z","last_seen":"2025-10-23T21:23:43.056084Z","times_seen":12,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":281,"dns":0,"connect":0,"send":0,"wait":32,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/kagaming.png","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/kagaming.png HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=WMwB49mDHq5LqZep; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 2844\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: \"68f899fd-b1c\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2844,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"c73e8335e02c283c022ea47f9b072f28","sha1":"1587e6a4ad71337f14b822fe81d535b8fa41a793","sha256":"e01a0057456828bd333d553d66e4edb9bf36cdd9f797f70fd0eb925807d209fe","sha512":"6afc2ca7fdbe5e2cd3680bb6c95b3e249bc5f03bb817e6f4d21e6ca5db975ba7c3fff0f912d046d881df97dbb4f4e93841656fc89ff9e73c4c7217fa92aa2cab","ssdeep":"","tlshash":"df516db575b034615e9012f8180f11089bc299867903aaed800bc137ebc90a6b3c02ff","first_seen":"2025-08-09T06:39:58.927401Z","last_seen":"2026-04-15T02:03:05.950904Z","times_seen":62,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":122,"dns":0,"connect":0,"send":0,"wait":82,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/fonts/Roboto.ttf","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /v/fonts/Roboto.ttf HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:27 GMT\r\nContent-Type: text/plain\r\nLast-Modified: Mon, 29 Sep 2025 21:14:19 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"68daf6ab-29144\"\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":168260,"size_decoded":0,"mime_type":"text/plain","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", name offset 0x96000218","md5":"73e5e33319edb8e4c97e37cdfe616cb8","sha1":"7784f765a8fd13fb67bac14cf3c11373538955c8","sha256":"f66c295bf6f985892e07ce64d2df9149416ef950f9b65420b7de2e6f5ba0175a","sha512":"658ae380ebd8cb5a040d69d0bb8ed94421013298913fc46ba9bc010c017a2e72cdf162672a94852f466a1f764aa09e0c88cb19c3e73c1d2c616d08ad0786d318","ssdeep":"3072:RCgWJENpDQoK6jS3I+/l3mRDOTAzM7t2eV2dlNvVWgHkLAHX3lbgva:PCENtQVmNO8u2eV2h3kpva","tlshash":"59245106ebcebb9ec14093f33dabdacc56efe4225d51e513c64b6011ce05468a71f62a","first_seen":"2025-02-09T09:50:26.857461Z","last_seen":"2026-07-26T15:38:30.828571Z","times_seen":269,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":103,"dns":1,"connect":32,"send":0,"wait":78,"receive":65,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/BmraxXvh.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/BmraxXvh.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/l9CMu1bs.js\r\nCookie: __ddg8_=3RwUFnpbxrXG4Xdr; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Ikw5XiYhHLXVgJtL; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-d13\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 1269\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3347,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3346)","md5":"88026a00966ccd09a8426d069248f323","sha1":"a0aa2ca00b95a22b880bea71b377663ffef35879","sha256":"32bd35f0d60ed26167d0953eae6dfbd36b8af8780d52c863feb36a377675bcde","sha512":"aff334be6c8bf7db24e7af6214b0cbc497c4be336ed9fe22c6e07bee07027aae685746b27478a561a13897ddb909835137351b61db05738659c2b27a70ce3ef4","ssdeep":"","tlshash":"2e6130fc1635a57226eb17bb43a20c9282764455f049b27010da8f0c552dc984bf7ffa","first_seen":"2025-10-23T21:23:43.065131Z","last_seen":"2025-10-23T21:23:43.065131Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DPl3vcyW.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/DPl3vcyW.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/Razus-0y.js\r\nCookie: __ddg8_=82yFQzxAXCtyCkhF; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=xnOodYOWtzBVM52n; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-2235d\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 30494\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140125,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (43451)","md5":"c9815d80e77c84c7b89ed6a686612dac","sha1":"b48bc6261d0703a36b7274200040d241b71fd180","sha256":"8598da16ec7c64cfde7837cd637030befebbf5a653127cdfbbec012ff5bc781f","sha512":"36db6326b19c0f33fb31dc7d0b68098db7981ba650a9ce43e5e6dcd32a19d4097c11d408655e9b99b4043bee15f2f6ae8f8f06527d547f6df5de3d80e8e563b2","ssdeep":"1536:qUNhtJfsOYXoS1aX9cebZyN7DA2wkGgL+oh31xzSP6qL8TDhyKPkG/uHAj9eiy5R:qohtJfsOgbeM7pgK+oh310KRPj9OKg7","tlshash":"a9d35f4b4e0c0e7a056213b02fada7b366acc07571dbc3e657bf82182375465aee175c","first_seen":"2025-10-23T21:23:43.067227Z","last_seen":"2025-10-23T21:23:43.067227Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/ext/cdp-customer//v1/analytics-js/inAppPlugin.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /ext/cdp-customer//v1/analytics-js/inAppPlugin.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=j4lfNxdNaKWI7Dpy; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=MwvIx8kkViFTZlMm; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\netag: W/43bc44026ca2117bf0438e53bb1919b7\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: public,max-age=300,immutable, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nservice-worker-allowed: off\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5580,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5580), with no line terminators","md5":"2b3f92234d8907a103ec9dc2b05589f1","sha1":"2f2c0961bace40551cc39d1728715b94ec82db2e","sha256":"ae91906abf85a449f6ec41c31f1bc77b9bd3505bb7e55d61760b47c3fb11e3dd","sha512":"62174308a9634879afda50af1511adf6af4081ae78910db5c71cc0bb764cfb2c287c659d8653268b4b1eba7e6eb76b7b8096c1416a28b069f19e38019a7d38a2","ssdeep":"96:frYe+t6Sgb0qKEIwRGBMtIPmcKhgbUk6HEHvRrVxEC7NTjQCtGf8J4HJDFqK/+bD:Nd7KOwBMtgLgHE7T864KKqKk","tlshash":"3cb1ec9df793f82c05f39a7de5773423923a3b026099e411e057cec2596838d6123bb9","first_seen":"2025-09-25T08:21:12.736151Z","last_seen":"2025-12-15T01:19:11.275667Z","times_seen":356,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/HA7_xM6x.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/HA7_xM6x.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/l9CMu1bs.js\r\nCookie: __ddg8_=3RwUFnpbxrXG4Xdr; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=3adjnxiFoTKfrJkF; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nddg-cache-status: HIT,MISS\r\netag: W/\"68f899fd-23e1\"\r\nage: 1\r\ncontent-length: 3804\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":9185,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9184)","md5":"2ed80197c76fb5db20aa8d18a44a5262","sha1":"45386d7906c002b925648a74074a801869f018dd","sha256":"e15890d2b09b832d7e44d263fbb994948c177131fda8a3491e02f34585e7062b","sha512":"ec00ce2688207562f16bd15fd832eb9836a5c353d5e89b899686aa51963d436591e4b13d3e490491fb6deed7a4127434f1748d0b7a85b31d39913d072de173cf","ssdeep":"192:CyqsxSEFu6ZufGq++k5qQbZQ+tOWwYpsTctY0ipgNE7oVKRpXKlEp:CyhZ8fK+kQQbDLwYpfYZplOKRpXH","tlshash":"ad12fad473ec72aa59620dd12475481ee434e6243b26f4d1f2b934bab497c44b273f2d","first_seen":"2025-10-23T21:23:43.072866Z","last_seen":"2025-10-23T21:23:43.072866Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KN757LMM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtm.js?id=GTM-KN757LMM HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\nexpires: Thu, 23 Oct 2025 21:22:23 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 23 Oct 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 132238\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":389283,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9788)","md5":"d532b7e434c57f278553dd6ba92d09a5","sha1":"b24973c878ddfdc49f1ce2a64b3bece4c22c75d5","sha256":"73807c304dbe044c60e8a6a13d4d3bd0e28ee2faced589ec265d876121e13392","sha512":"4624a749553c5cbd510591c9308df9f073125e30194c36fcf73c3fcf3335f3e3506a1c89e7e9de87d26f673cde645cfe4610fad0d67a1856ec3a69bec236d84e","ssdeep":"6144:lXyJFXH84g9Z8nP57Mr/s0PS/cN3Kxxc20+YlyeMjAX:liJFZg9Z8nP5YD8/FYlGG","tlshash":"598419cdb3c6746683a3b478403f114ba17b29a1b84cc895f186dce42d74aaa4277f7d","first_seen":"2025-10-23T21:23:43.077468Z","last_seen":"2025-10-23T21:23:43.077468Z","times_seen":1,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/locales/en.png","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/locales/en.png HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=y8mcLihooYsACKeY; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fUxCaJYItDHjXNM4; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 1751\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: \"68f899fd-6d7\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1751,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"4cd1cdce1c1f2c0290a2b686aefd5ddf","sha1":"250db2d70a924c49b0ac1c1a3668bc1737267069","sha256":"3d2348697a12ab3e497f215c2920a6f738a058c599429cad719e36adc4eaf61e","sha512":"ec34b4ba528679e4fbbf3a4022ed5127f89186291036d8ebef5c0781353efa89bdbb24cdd006656160a85a7dfcfe000458d7ffbfe4ca2c13e4558189d583b197","ssdeep":"","tlshash":"79311dcfc46897c980e782392ac6d3954a399ce0449bf58698150264370ae57575dd0b","first_seen":"2025-08-09T06:39:58.901689Z","last_seen":"2026-06-26T20:23:29.901851Z","times_seen":108,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/mX7rIXiKQKjO5apJY0GLU2dEiptFFKQRuRZTZrQP.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/mX7rIXiKQKjO5apJY0GLU2dEiptFFKQRuRZTZrQP.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/webp\r\nContent-Length: 57936\r\nConnection: keep-alive\r\nlast-modified: Thu, 23 Oct 2025 13:16:52 GMT\r\nx-rgw-object-type: Normal\r\netag: \"3a29d6d65127652878cb151873a748d3\"\r\nx-amz-request-id: tx0000044087be081d8fcc6-0068fa2c66-173b8ac76-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57936,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1380x736, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3a29d6d65127652878cb151873a748d3","sha1":"43efcf85fd0dfb179797ecfbbdb98a2654cb5d75","sha256":"e2aa060e50ee4e4c804413f690dba5bb2e0d595c4254420d4cbb22684dc283b9","sha512":"9d41748a5bd4e9b7eedd2eee7082024c65fe322f940cf16a7a7e88d82607540f79b8fa9d37bfb131910652958fd9d46556459f8e0442625b9b029a3beddfd636","ssdeep":"1536:Ev1cdq/4qlEJRZq/UIocGq381XyfLSvF+Wd:TdI4qlmmUqGx+LiYK","tlshash":"174302fe2b2be125c91c4725131f67f63a8a347fa8c1b69150ec008e9bbab70d245d06","first_seen":"2025-10-23T21:23:43.07972Z","last_seen":"2025-11-04T07:52:58.952969Z","times_seen":2,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":251,"dns":0,"connect":0,"send":0,"wait":44,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/fonts/Roboto-Bold.ttf","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /v/fonts/Roboto-Bold.ttf HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:27 GMT\r\nContent-Type: text/plain\r\nLast-Modified: Mon, 29 Sep 2025 21:14:19 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"68daf6ab-28da8\"\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":167336,"size_decoded":0,"mime_type":"text/plain","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", name offset 0x1900020d","md5":"da7ecac250e13817947dd1f5c1571f91","sha1":"aa8f07e3b700656a5cb3a0a402451d98e796841a","sha256":"027ba3f46b3e647249971010ed596b9443d4eb95b96959582fbe5a1f8b83bb16","sha512":"506f2623384972a3969a8ba6b0665de8bb1d708d1e0e143ea77bf559c8bf82b678f57db34cc3240411e8679a4a86c532b2328eff4d9c4b8da2d226c78e7dd0af","ssdeep":"3072:11FSM9EcsQqivOV08PlIgn/CsDQVb16yyfHC820XRuX/4XhXXXXXXGKkxIMoFKna:fTsovQ7IgnLcTUfxhdknoena","tlshash":"0e246503ebcfb7aed14083f37debca8856eff03a5d11e557958a2011c905498a74f62a","first_seen":"2025-03-21T05:40:08.901524Z","last_seen":"2026-07-17T18:42:53.960132Z","times_seen":160,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/YlOf_41J.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/YlOf_41J.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/Razus-0y.js\r\nCookie: __ddg8_=8bFzcCjSgB0nLT3j; __ddg10_=1761254547; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=BHt4z76zVXz1Y1Ci; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-27e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":638,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (632)","md5":"83388ada47134ebaeffd4a25667118dc","sha1":"18f9cd8c3b3f51aa4cf403ee743221cdb52e19d1","sha256":"80b87aa5ce86089b085374cb00f2faf87629d2b8afc37b7016a134010b73fc96","sha512":"4e86ff64f4d8591e36dec26587d65bb4bcb720dd6878029316c31f083b8faa28beb584579f18462317cb4b29dc2f10d2d43e7264d50b7172284cb6166484d11b","ssdeep":"","tlshash":"90f04c9fd461407c5045dce0e436c471627b64e36be9d370c1cf2b746360478d9992a7","first_seen":"2025-10-23T21:23:43.082216Z","last_seen":"2025-10-23T21:23:43.082216Z","times_seen":1,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/zyQ2Z5SQ.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:28.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/zyQ2Z5SQ.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/QPlbqdGQ.js\r\nCookie: __ddg8_=y5sHjN5M9S7JNuTJ; __ddg10_=1761254547; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2mVE5SU1uSQrqSyw; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg10_=1761254548; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-8a7\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2215,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (2214)","md5":"eed8a2ef5a4b04857acd9c5d606c298d","sha1":"0c034c159ffbdf024da5780d72030d05acd58455","sha256":"8b56d868ad02e7a61765e5ed8ff1eaac4ba38952f40a0cd99de86a9a5bc01fde","sha512":"d098077756d7129cfe467e4fd24a186b819b058cc23b37b8abb7599d9eacb5a6d97fb0621cdaf1cfab9d97b031b0e57dd5e639aa63123f1aad2a14a89c54c49e","ssdeep":"","tlshash":"744130da274e0518340e8382c885f5aaa73663a5b5e3d46c3ce29dc77201c43f6b0e65","first_seen":"2025-10-23T21:23:43.083786Z","last_seen":"2025-10-23T21:23:43.083786Z","times_seen":1,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/3a2c9dc212edfde626137fae5ddb22b3.png/xSTsWv4nQxIJxiBtgHoPEzV25xnMK05RgqVvEWJW.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/3a2c9dc212edfde626137fae5ddb22b3.png/xSTsWv4nQxIJxiBtgHoPEzV25xnMK05RgqVvEWJW.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 446202\r\nConnection: keep-alive\r\nlast-modified: Fri, 08 Aug 2025 11:28:05 GMT\r\nx-rgw-object-type: Normal\r\netag: \"e52cb297e75cfb0b064b0231cc4ee04d\"\r\nx-amz-request-id: tx00000ed8654f0664f64cb-006895df46-16cd69584-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":446202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"e52cb297e75cfb0b064b0231cc4ee04d","sha1":"86a1e85f85a12a96e38808e2af1f02d9346fdb17","sha256":"c9d99f019ef67c7a402ff0f7526bba4dd462f741c39ad85e49f08d75e8e32b6c","sha512":"c0b988dea8552e2681e10deebdbee60e559920b37072ea61642ebb8cf5e120b7db73b31b2f250a5fc8c80f425de6002a33a66b751055bf51e8e2657be1f9e274","ssdeep":"6144:srq5uir6J6/Roxf3ZtY8if8xXFDmjHGVH1CFLyZjg1rGb1BrSfsLWGIY3kUz6G:sr1zJTxvZScXlw+csb1ORY06","tlshash":"9094238d2506ecc807c8fc11a567df8ca6c1f58be1f198b61c65b2f94bbadf14ad4a04","first_seen":"2025-08-12T21:10:07.685554Z","last_seen":"2026-01-21T08:18:57.047268Z","times_seen":28,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":191,"dns":0,"connect":0,"send":0,"wait":30,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/fdc4364a3eae2f06260e2f95ce9571ed/Belatra%20Games/714ca4aa6a5a444b979c52b8d37cad53.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/fdc4364a3eae2f06260e2f95ce9571ed/Belatra%20Games/714ca4aa6a5a444b979c52b8d37cad53.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 25741\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"220486d966c1a1a36ab56e0f5395ea94\"\r\nlast-modified: Thu, 31 Aug 2023 06:06:21 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1870A0AE4BAEEA0E\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 3377\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dnKqt8J%2BmmAruaplS7zj%2B5hCYSk0bbU2aMIEmQP7lLCefJt6c6sSm%2Fnfs8%2FFhoLfyA7j4uZb3XO0UjU%2B1L3EvlTuyh%2FI6YDH1ZGmurys\"}]}\r\nCF-RAY: 99337de89c4ac23f-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25741,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"220486d966c1a1a36ab56e0f5395ea94","sha1":"780101293ba21e0ac7193d0e6e979ca3fa082912","sha256":"f0e372822148f12ed8f014504853b32bef5ae14d758e19af0103543f675a2c66","sha512":"cb113582e16d1910dab55221983c03e5b581bf984338c62930098dd3578a039957903e8c60505253e87eb771c8f55f90a2e802717a624d965f5d4ad73bc4b5b6","ssdeep":"768:YC/Ew+9U5+Mhl+Q8lQZNhZnCC+f5eGyOmDup:LEw+9U5+Mhl+2ZNhZnckGyOmDup","tlshash":"6dc2f176da92f8abd4c887f40090b8427e92af38201ee5dd9a3c75f127b53f12498d13","first_seen":"2024-05-07T05:57:00Z","last_seen":"2026-03-01T21:47:53.490083Z","times_seen":44,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":208,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/msfup7WND3gIcQOEA6yrzn9CUi7xg8W7n0Am8Xu7.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/msfup7WND3gIcQOEA6yrzn9CUi7xg8W7n0Am8Xu7.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/webp\r\nContent-Length: 43152\r\nConnection: keep-alive\r\nlast-modified: Tue, 08 Apr 2025 10:00:19 GMT\r\nx-rgw-object-type: Normal\r\netag: \"9749cb678f0dd3044e53d10cc706bb3c\"\r\nx-amz-request-id: tx00000bf1c4f2d3ab5fcdf-006867c79a-1639b45fb-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43152,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9749cb678f0dd3044e53d10cc706bb3c","sha1":"a08d9e0ca5dabd2fecf5f22d26ecacad10ae2b7b","sha256":"c01b6fa848eac96c626316b1262ec7d5d58c474ccc68abd9b752a93cd56a0aea","sha512":"8884ad7a4d4d9d5e217fb57da7c294f5b37e717f9636511b5da29ae80ff341ad700909d2fd8b25d9275f957da750e12c3b24c85f1cb3a0d5576f0efc80112386","ssdeep":"768:GNGhsbOZlR0QqONdBovuI2AWzorAgi2JrgRNYTtcFP4QYnAw:47OZjqgHoPFKDgZ0sTtcFPgAw","tlshash":"86130121230f099493a7e8dade87c49d2e4e2a188f0d775342d96e96c4a5cf9c5bc7cc","first_seen":"2025-09-09T11:33:29.107349Z","last_seen":"2026-03-01T21:47:53.463039Z","times_seen":26,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 351872\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Oct 2025 17:22:28 GMT\r\nexpires: Fri, 23 Oct 2026 17:22:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 20 Oct 2025 03:59:59 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 14396\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":825565,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (564)","md5":"126e162b606d5b82daf63f92a9a23c19","sha1":"22771edfc483675d16eecb446f1580992cae94a3","sha256":"c829356f4b331095018382d7d5399a157d56e91c260a4ffa2681fb9934c8d0ec","sha512":"d2cc8041652df60bc8cfb3f32819030d3d8af8292f05a287b0e87a13fe6c3d1e2212140cebc5262877d21e6a232fb99a9f528a4b254820a3ff8371936aa791eb","ssdeep":"12288:97bxxKQ2lDEGEnmAJud4pypzfKCp0qh2eChI7AKXD8PpRQUkO0Tq67:9bxxh2lDEGEmrapOznnAKXD8PpRQ7vF","tlshash":"d0055be979417d65e322b4f22077a24ce72d9965d84e081eb4d4d8f02eb481e3077ebb","first_seen":"2025-10-21T01:58:59.278332Z","last_seen":"2026-07-21T10:49:59.56495Z","times_seen":18206,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/regdep/pc-v2.webp","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/regdep/pc-v2.webp HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/default.p4T8Rkj0.css\r\nCookie: __ddg8_=TSrHvrSbN7hteww4; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NggqTy4qrJsmURmj; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 94832\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: \"68f899fd-17270\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":94832,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9018a8fdf0ff36253cc1f72bae5bf4df","sha1":"88daf79e98ed2da74ba53ec9aae175cfd92623b7","sha256":"531a28deef62525b83cd993c9239116f7a447521bccc88aa475ee76e17a8087e","sha512":"12b075ab073d229a491fd04b96b3baa164a6da07fbc8253959238712871059d7926df356012c8ec62ecfae465da0bf65205617b1f78820bd042c21a625c3f432","ssdeep":"1536:iaWi0jre92XKVGPJzAcy9iQNvOWRRFEE7itL3hasvBaUnbqykQrRvMMB:iU0jre3gPZAF9iQBO8SPa2beC","tlshash":"069302be4585d39cff3d773dac66f360abcd15645032eae12d84335aa698672c13ac02","first_seen":"2025-08-29T06:11:21.03738Z","last_seen":"2026-06-04T08:51:57.410112Z","times_seen":96,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/7e4352eb49dad04b797ce6b1c6a2e99dcd378f74.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/7e4352eb49dad04b797ce6b1c6a2e99dcd378f74.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 34333\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1866E9EDB7DCF9CA\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 5877\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WZJ4TGYzPYQoB5OH%2BHeHWMQt7jfCM%2F%2BCqxxX6%2FWrh5SIC0H3PRY6pTj1iUqOjG7fmEAmS0VXyDMRlaYmS8JF2%2FPBun5%2BUD%2Ba93A%2BOTSH\"}]}\r\nCF-RAY: 993398dabf68339e-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34333,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"3a08bf816dbe5d58df213c6f4fd77177","sha1":"cf2600b0891b717f47bdbc2d53523e17cc7065c9","sha256":"d912d5fa092dc49b9fc1e27afc82f40a6ae1ee0dc16736eef37ddcb6b6fc5fcd","sha512":"0f2db5c4f8d978104fa7faeef9b30b6860166c128c32303f98046da3bf6232efe6cab366f7db93264713819ebc0ca2716f4992c60b0e486b8f1e6c2fcc632d20","ssdeep":"768:MjR1nsLnaKILL30CAgSUsDL6qrEbn9uxJHxHPI:s1sbSXRHmJ2","tlshash":"a1f2f1fd133917ca5c5fbc4062e11274edef0b748380d9c3a9b6c5b970ae9589683e68","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-03-01T21:47:53.39896Z","times_seen":65,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":206,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/3LDwFpHfnzejPdw1gkkhY2GtywM01PtiYajInyiD.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/3LDwFpHfnzejPdw1gkkhY2GtywM01PtiYajInyiD.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/webp\r\nContent-Length: 213616\r\nConnection: keep-alive\r\nlast-modified: Fri, 18 Apr 2025 08:17:40 GMT\r\nx-rgw-object-type: Normal\r\netag: \"1ece2594b83e3fe5f9d9871670e414f0\"\r\nx-amz-request-id: tx000007164bd18d3e430c8-00687f66c5-1686c198d-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":213616,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2880x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1ece2594b83e3fe5f9d9871670e414f0","sha1":"96bfdfc02ad70da1d0a5366b59701d30d2dc86c5","sha256":"d3c3132f9a6fa0f31b6c17dd195425013614fbb136baededadc9394a41330298","sha512":"4055ba5af0711ed8a6c780904b0c77eff36ddded5223173e8558cc8f1b0a4ba83af073e426df797b2e670343bffc42b8cb405002f19795bbf7e14919755cd12f","ssdeep":"6144:onJhrC7dAbGBbIXgo0Z8CND/EO1UEgjKAzDSM0b1aN7V:onJh4BERiTFGEg+cS71Mp","tlshash":"92241237b8d68dc9adbb42945930ca09f0975066ec972cfc72201b18e6577b792f2332","first_seen":"2025-08-09T06:39:58.829989Z","last_seen":"2026-03-01T21:47:53.499531Z","times_seen":32,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":30,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/tmQUmTozn4rL6eTyx5nXvan0x5G4IxyRqRqZ6exj.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/tmQUmTozn4rL6eTyx5nXvan0x5G4IxyRqRqZ6exj.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/webp\r\nContent-Length: 38928\r\nConnection: keep-alive\r\nlast-modified: Tue, 08 Apr 2025 10:07:29 GMT\r\nx-rgw-object-type: Normal\r\netag: \"5f730560307bd52cce886d2e57f9e088\"\r\nx-amz-request-id: tx00000423202b539d8b1d0-006867c79a-162d5ff72-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38928,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f730560307bd52cce886d2e57f9e088","sha1":"2f596a3c38ed0bdca79801fb1a16de255ca19319","sha256":"07ae82d1a13c9a7115e42c69a39702959079e97a7d37958c7621f41ec538015b","sha512":"1c84aca9647ab03f2810cd280b484c307f9b4aef9ca351decb6a63aead79ac1e0521fa4fa7227ac9655a573812d46d7b15d164b22c0df48d17035235af1c0bec","ssdeep":"768:wCwztLST7Nd0we1wkvmZqFzDZ+KvTORnKhdJmEw:OztczswemZqFn1v4nu6Ew","tlshash":"c703f119e216ea4874a62dda74ea8c6ed43360feba4c1e13dfb0b5e991d30725b2c150","first_seen":"2025-09-09T11:33:29.151798Z","last_seen":"2025-11-28T02:25:21.280898Z","times_seen":16,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":167,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/B7zlPWJx.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/B7zlPWJx.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/YlOf_41J.js\r\nCookie: __ddg8_=WTUXGcMiUqGqNkKS; __ddg10_=1761254547; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=B3wd8LaFUBwBwmjv; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-3960\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14688,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14687)","md5":"15a022b3e7ef015f0e8129ce203e9194","sha1":"6c101945aea286cb8da98ef252bfd3971e30a906","sha256":"8ae9a7f9ea400235a91ed1750f3b75f9c942fbd62ae790f69325ace5e56a5c39","sha512":"f334a385350e86fba39af4a36a3f41c8af556c5c444b1bbf31c914f46e98bd56f06ddfc648d02558f1ca72ace386f32676f44e3a21062dc79dce5b87f7d30bbd","ssdeep":"384:gXI2fR3nEQz82bNgBfBf3hkyu7cuVnMYPYzQ4GVbNTnZRRz97zn:x253EF2KdhkyFaYE4GVbNTZn97z","tlshash":"5462e71ef48e687e65b654c429d87d01b1282ed7d14048e3a4f5ce32264ac6cb76eaf8","first_seen":"2025-10-23T21:23:43.092492Z","last_seen":"2025-10-23T21:23:43.092492Z","times_seen":1,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/button.php","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /button.php HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:22 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\nX-Webim-Version: 10.7.130\r\nEtag: \"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-07-27T14:57:08.573668Z","times_seen":95225,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/notfound.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/notfound.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/Home.COQPz2RO.css\r\nCookie: __ddg8_=Ns3gTHgj9bKaSgBE; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=lfEJuvHk1x9bZLZi; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-4f4\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1268,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d407ca6493dfd5a34e7f79fa4504c402","sha1":"dd9fb47686492da351804b5826accf2524ab7dfb","sha256":"a0ac446a4d2979bfa2f6f73339f7087e6f7ff83435b3dd7f7b363c049b2c3bfd","sha512":"473308352777d8acb3d5d35275465ad7739729a4844908986ccd5f4e1041c0cf931cc328bf2c3f23035b218da4173afb835eeddfaf114304f5af1aaf3011c07e","ssdeep":"","tlshash":"2321b7f9932020d4dc075bf8dfa638d98007b9fa5e5002cba67471153308ccee401b5a","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-04-15T02:03:05.909912Z","times_seen":76,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/tournaments/banner-bg-desktop.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/tournaments/banner-bg-desktop.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/Home.COQPz2RO.css\r\nCookie: __ddg8_=Ns3gTHgj9bKaSgBE; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=LWhwtbD1Kh4WbjGG; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-673\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1651,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c02768642950741c2a8d0e39f8d412e0","sha1":"118f935a0df15e0ac81aea94278cdb9becf7e2da","sha256":"3770b25538633725c3d38f810216e8e5f7404271db7f0d2c8b0451c1c8c3d537","sha512":"0b6902166f6e8a047afb84701de82dce41008465d70c73f01f0011eadfa53e0b0db1b381f346e5de57b20f806a23a8e154ef48eb8abefb190e0e215c66e7c472","ssdeep":"","tlshash":"c331dc7582ac7c1ee60dc64cc6eb4028221f41a3a3d1c5c072577b7e76384c52dbe36a","first_seen":"2025-08-09T06:39:59.150017Z","last_seen":"2026-04-15T02:03:05.874483Z","times_seen":62,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/eurostile-medium.3X2MmRgw.woff","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/eurostile-medium.3X2MmRgw.woff HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=FGtw5lm99qvXuD9y; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=x0ohQsZGA4WHEphQ; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: font/woff\r\ncontent-length: 98196\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: \"68f899fd-17f94\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98196,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 98196, version 1.0","md5":"1b2773c10e2b7a4d63dd161388b9b249","sha1":"fa912d25a481a172b3ce10c761029e5376358454","sha256":"a3a1d88dbc3e8db9422ccbce5d028142c56127d84eeee451d8dc198c1d62fde8","sha512":"deafa807a9f10b6d2d26170e0ec87018df97dbfc987400a6783bf3b2b4a7c6c912faa83ccefd7bbe080a9e9b048ad2063d6dd64c358de87af01e98de53bf227c","ssdeep":"1536:9R+Jl0Hu0SFg5j42ogmGmcNAaXOp9EAHRnEhU5zeZvRln6Myn1WZUJO0pyF7ZvjE:9yZ0SOIg7VxXOpLEwwvRbyAopyF7Zmj","tlshash":"83a312705a94e042d44bc0ff90a75e06ad7cebffc509ab208b828756847d5be4e18ac7","first_seen":"2025-10-09T10:23:07.318599Z","last_seen":"2026-03-01T21:47:53.209987Z","times_seen":23,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":97,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/B-6jxm67.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/B-6jxm67.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/DkfJfwvf.js\r\nCookie: __ddg8_=tRb8IDCLyZelYsVt; __ddg10_=1761254547; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=WTUXGcMiUqGqNkKS; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-f28\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3880,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (3879)","md5":"778477b8556daf8ddd1d518531c2afa9","sha1":"efee34dff3755e0af4081667a91742e3a4b579de","sha256":"2dcbbda2044b5db22575124b9181cb21038a82eeda00123bc996ca93ad590166","sha512":"825a9477bb15be05fc1e322b324e126ccffb27e7890296085e6a7d30587d11634a7bcf533420d1675a79ec988969595850de0ec601a53d6fe39576b810335526","ssdeep":"","tlshash":"37815679b027a8f5a210d36f9e044d9239cf0dfe5a15f076e0f4a480a7eac74da4d352","first_seen":"2025-10-23T21:23:43.108861Z","last_seen":"2025-10-23T21:23:43.108861Z","times_seen":1,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/QPlbqdGQ.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/QPlbqdGQ.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/Razus-0y.js\r\nCookie: __ddg8_=rVnPFUtG3voKKIjC; __ddg10_=1761254547; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=6wMpKBNeKK3NgtzN; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-c791\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51089,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (51044)","md5":"a55c554504c1643a6c31ab0f50bfe22d","sha1":"a8b4443239001a4664886a96690c9da2c2af2fb4","sha256":"f4b3c012b753bc1dcb4069a484003db9ff2c34fc97100f207ab3f90aa6a38873","sha512":"56346f310c80f06b95d672a35ab36de34ad01ea8a7d9b43ebffcb1a6e3d19da06c538087255a4028f40d279817eaff56512a3907eb4e060e3743665c61bf191a","ssdeep":"1536:XqFEnkX103iWkiTlLFTm1N4un6NdaCjb9bNPUyXGl7Y3riZqrSPKP/PqwZ:XqFEnklWiWkiTlLRm1N4un6Nd3jb9bN9","tlshash":"a03319eef06ca5f8c17383d498995014b72d3ff96640409a92fc4e646f6c4b86fb8d68","first_seen":"2025-10-23T21:23:43.110797Z","last_seen":"2025-10-23T21:23:43.110797Z","times_seen":1,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-23T21:22:20.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9ZSoKAj7K7DPbray; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\n__ddg10_=1761254540; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\n__ddg1_=i9E5ZVGVoAiE1lA8US7X; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:20 GMT\ni18n_redirected=en; Path=/; Expires=Fri, 23 Oct 2026 21:22:20 GMT; SameSite=Lax\nuserVersion=45.10.240.53; Max-Age=86400; Path=/\nuserBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; Max-Age=86400; Path=/\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:20 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Nuxt\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":406127,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65057)","md5":"b73ab6ff7d6a938fcd350174b7c32235","sha1":"7255a7a378e9976101fdb20b416102d066657775","sha256":"410bab30bfbb708284be6a7874a514e0718ec886a6f04586f9141b17c56df9c1","sha512":"51e84a76abf065ea3e82e27e53dc9e8848a145527c037fac67ce5bf65b58aa5ac903a14a9ee91e719e44c2a33ad391fb291c22599251788354f50fc309755aa7","ssdeep":"3072:vZJYobqAfuybg1870qYOwfwONtsEb2F61UU1Bgu:DbqAfF70qYOwo4tsEb2FhU5","tlshash":"1f84d6d36630342ea16fd457f1a1eed8f434a815d31367ebe1e61a25cbc2c861673a38","first_seen":"2025-10-23T21:23:43.116801Z","last_seen":"2025-10-23T21:23:43.116801Z","times_seen":1,"resource_available":false,"data":null}},"time_used":750,"timings":{"blocked":221,"dns":57,"connect":20,"send":0,"wait":308,"receive":0,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Razus-0y.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:20.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/Razus-0y.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=9ZSoKAj7K7DPbray; __ddg10_=1761254540; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=D2ka9dblCoKrIlBd; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\n__ddg10_=1761254540; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nddg-cache-status: MISS,MISS\r\netag: W/\"68f899fd-775ee\"\r\nage: 0\r\ncontent-length: 171291\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":488942,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (47596)","md5":"a41f0a93536181ab28b02f37731757eb","sha1":"60dd82451fa91f9c784158226779cfdd6c94d1d0","sha256":"ab433d16063a4b34933b2a525fbcfd0cb5b4a60f7c3ff04cfc49c80567caa782","sha512":"286501ac2ce88c4e6ad719f3674f51a085ece9f6411a8aa446994a2f04397586765e8dab308923b04e594ce0238f4317e49bbf8daefc7aa1065e4684b65b996b","ssdeep":"6144:fnSzjJLQT2m905wx1DQTXdFSW3bVSzA6MnIgqaTLwbvvosSDh6qJJ8LHIF9y:PWjpQ39ewx1cFSubV4mIgqaPsG8qJJ6","tlshash":"51a45bd97196b02253f619f4907b0106f3392a58384ec4e4f16daeea3d7680a91b7f7c","first_seen":"2025-10-23T21:23:43.118234Z","last_seen":"2025-10-23T21:23:43.118234Z","times_seen":1,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 351872\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Oct 2025 17:22:28 GMT\r\nexpires: Fri, 23 Oct 2026 17:22:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 20 Oct 2025 03:59:59 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 14395\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":825565,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (564)","md5":"126e162b606d5b82daf63f92a9a23c19","sha1":"22771edfc483675d16eecb446f1580992cae94a3","sha256":"c829356f4b331095018382d7d5399a157d56e91c260a4ffa2681fb9934c8d0ec","sha512":"d2cc8041652df60bc8cfb3f32819030d3d8af8292f05a287b0e87a13fe6c3d1e2212140cebc5262877d21e6a232fb99a9f528a4b254820a3ff8371936aa791eb","ssdeep":"12288:97bxxKQ2lDEGEnmAJud4pypzfKCp0qh2eChI7AKXD8PpRQUkO0Tq67:9bxxh2lDEGEmrapOznnAKXD8PpRQ7vF","tlshash":"d0055be979417d65e322b4f22077a24ce72d9965d84e081eb4d4d8f02eb481e3077ebb","first_seen":"2025-10-21T01:58:59.278332Z","last_seen":"2026-07-21T10:49:59.56495Z","times_seen":18206,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":80,"dns":1,"connect":8,"send":0,"wait":10,"receive":37,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/NGaR-3eG.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/NGaR-3eG.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/l9CMu1bs.js\r\nCookie: __ddg8_=3RwUFnpbxrXG4Xdr; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=EkR79TSNijAXusvE; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-9478\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 10309\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38008,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (37964)","md5":"a5706fc7cc65a5ec11657ba938c974f0","sha1":"ce9d345c477f72ed2cf8458fb7579ba71adf9e36","sha256":"1cd65d71ae4689fbe9a88df6016ce61faebff9ecb074e5903663ffc47064c2da","sha512":"18ea9b138b9f3594255c3f851a9944df5fd381b52932f2415ab74a67d389d4bf8ee0a192219f8e38de222b122ff7ead1d288311acab1d51b062c7cb0c19392e0","ssdeep":"768:L0aRsM+IUjGqxlI8MivKoXIOWWMDwcaTIhdSx5QI3vunFqnPz1p1gImfPMEI134C:Q90oXIOWWMDwcaxPEfPiWO","tlshash":"1303e819a4296c3ed4775dec78981401f25d2feed0804c22a1fc9e187babc38279db79","first_seen":"2025-10-23T21:23:43.121534Z","last_seen":"2025-10-23T21:23:43.121534Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/SoXY3eRP1IfXB59cRpbMqcKzkN53rSUcLzEOpt4o.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/SoXY3eRP1IfXB59cRpbMqcKzkN53rSUcLzEOpt4o.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/webp\r\nContent-Length: 86430\r\nConnection: keep-alive\r\nlast-modified: Fri, 11 Jul 2025 13:37:41 GMT\r\nx-rgw-object-type: Normal\r\netag: \"de426953fb9ce3964b235ef80f8a47c4\"\r\nx-amz-request-id: tx00000d3f60fe9af487fe6-00687113ae-16585b23f-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":86430,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2160x960, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"de426953fb9ce3964b235ef80f8a47c4","sha1":"f1adf189f69abf63f95bbdb781c3b1f838a7eded","sha256":"b5acfd71f35c7d6b5acddd17a37c07a69d3705918b1720a84953aadf091a7bfb","sha512":"3ac2de58f6717ce6f707036195cb004d5420ea2a43a453c0436346c12efa0d644df9102c2392fa240791ed4cd499ce329912954597ec8c10935f16013cc8221c","ssdeep":"1536:eke8Tsa0XGSh4u4XaQ1dVQxrCd3joj8ozO/Ou2LjcNzF/oEwCYMr7:/aXh4u4PLQZU3jRoi/EcRV/Jv","tlshash":"85831212408f928ea4abd174987ffc647e73c86bfd61ce56279947612f24c3688d1b32","first_seen":"2025-08-09T06:39:58.960037Z","last_seen":"2026-03-01T21:47:53.325757Z","times_seen":32,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":157,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/playson.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/playson.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=CPUWJ9wvlNqOfUql; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-4b6\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5c779d57bcec0fe4d42e108b4f34c15f","sha1":"40e4c6d78d1a92f13deee6ff8291df1a84c2de61","sha256":"6903bea0047248cef50e6c09312dcf1df8f26ef511c10fd4f22bb7c9c7580494","sha512":"51ec89c6412be1df2d784b1368a1797067e248946c29eb545d9914bc3884552ee0a7d9bb1834f4ec7ba1ccafde38ffce918d2dbc04a49d7aff1a52dcb357422b","ssdeep":"","tlshash":"392151ebf39da7d0ed048320c82dd97840a678be7f58a39d43d0ecb2e41a85e1c48c80","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.866029Z","times_seen":70,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/footer/logo_mini.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/footer/logo_mini.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=Ns3gTHgj9bKaSgBE; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=nBWDz0Qgk8wDdToT; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-153\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":339,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec921737dc68bdec198dbf790cf25066","sha1":"7783777f39dd0406bf43f29691d5a297b6cdb254","sha256":"afb8137f243326318186eb1680a2f30d060004621a320a6ca93b807ec16cbb9c","sha512":"ee0a8cf1b8f8f28432ff245b02d211d6cc29d22fd55d60ac70ff126fb9b28a704bc862e2b7ae10027554b50b03ed73ee48e7f373f862ac8edac89350268dada7","ssdeep":"","tlshash":"00e0c0c4616833d090100768cf7f6165a5e2f4ae035c044bf2903115b215fc7a062b08","first_seen":"2025-08-09T06:39:59.047675Z","last_seen":"2026-01-21T08:18:57.02182Z","times_seen":36,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/games/casino/common","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /api/games/casino/common HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=AE5V8aSs0VF03BPy; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg1_=L5vnPOP6hza0Zi1Eb05f; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 84\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: d69d739f-36d0-4e08-ae7b-9fd01da87bd8\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":20347,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8e6872974559de7526d7800394ffa48b","sha1":"e0b049bb1db73716459cd13b845cff8cd5f5b9b7","sha256":"40c825158a3d45f969d90ffa2611243983c8bd70bb56e1dc07ba6532864f82cb","sha512":"09cbd2c285ddc69305b146b412abe1cb1cdeacb88f1a95d55f9483892d0c9a069aeb7a73c9fd33c85758b811b8abf39ff917fc11b314796bb83ac800b2e482a6","ssdeep":"384:LbVrfNrc6bGmy7PzwIMRniBHxZ6ADPM4g42SK56Zn4v8dCzbDo+3bNpmsnAI0TS9:lxlbDdiIqSQ4Ua1","tlshash":"4792066ab8c4e95a28331c70f5277cfaf5fe080f9844af61ddc44e4998e277b6241674","first_seen":"2025-10-23T21:23:43.128892Z","last_seen":"2025-10-23T21:23:43.128892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1715,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1715,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DxuQGHYR.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/DxuQGHYR.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/Bmu-_7RT.js\r\nCookie: __ddg8_=Ozl5rqCKb84VhBoH; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Cpx653vsc5AcTjtn; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nddg-cache-status: MISS,MISS\r\netag: W/\"68f899fd-19c\"\r\nage: 1\r\ncontent-length: 253\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":412,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (411)","md5":"3685ada0a15d8cc766d4789affb5eaaf","sha1":"09e47daf0ceed09f05723fe81e6e409f8d2476c0","sha256":"4ec48ad991d10405800482d3eca5e3e43e7a8902e717e75103364ddae3230e9e","sha512":"a7516dc78e60e56a1d6d52bef13e34f1b4eaf3e5fde33ceda332d2e48a2f388ad33ce5722f76e4a60355a9410c5ae6e58f8531e60ad450c4c480cfc662a467eb","ssdeep":"","tlshash":"aae0abce745d112093075ab99177106b9e2c1ec173086dd04409988334e0cd3c02fe97","first_seen":"2025-10-23T21:23:43.137791Z","last_seen":"2025-10-23T21:23:43.137791Z","times_seen":1,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/4097fb773f0ecaa3e16dc80294c306df.png/bjsGYlqcJrC7vsoFd61yH2CD0mZTiJdXfALQ3oQY.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/4097fb773f0ecaa3e16dc80294c306df.png/bjsGYlqcJrC7vsoFd61yH2CD0mZTiJdXfALQ3oQY.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 443093\r\nConnection: keep-alive\r\nlast-modified: Thu, 01 Aug 2024 09:45:31 GMT\r\nx-rgw-object-type: Normal\r\netag: \"86bb7f89e9b2adad9b6dcade91787ab6\"\r\nx-amz-request-id: tx00000e96e807c05b4596b-006867c482-1639b45c4-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":443093,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"86bb7f89e9b2adad9b6dcade91787ab6","sha1":"9af44e5e46e7a4d52a6ceef1eff614f7bb1f4e98","sha256":"398a47f398241852e5e84d36a3693781190610c826cbeb2ffa87a6c492ae7c64","sha512":"378c5cd1918fd9e802c1e4b566d0cc107211a89186f816ebfadba4b840d9fe82fe21971697b7fc348ed28d1369362caa78c96610fe8dc3132607c61f0ee7abe5","ssdeep":"12288:WecXgLcceNMjg3DjeAeGUEfiLtDiyI9xcKvMp:WB93NAYDjeQ8t8p0p","tlshash":"509423dea1f4cfa5e89ce81210e12fe5bb5d60cadb66494691c4b360fb377e10c90ca5","first_seen":"2025-08-09T06:39:59.03782Z","last_seen":"2026-03-01T21:47:53.29643Z","times_seen":29,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":316,"dns":0,"connect":0,"send":0,"wait":39,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/smartsoft.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/smartsoft.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=3AD3QCrGrT4BTlWz; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-3341\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13121,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7722afce4dc4c324b442e3ef00aa3490","sha1":"475e0ba00a1ac2e95ae1c61480ebf9b72a979986","sha256":"487a0543786eb77e32859b8f6d2442028623bd3bd26713f4c5d2427b7539211f","sha512":"ec087002ad401686045e7995d9d5da89d0dfa16880c0615b188975b824f4e8c7dbb8bd3612b814f04d3dacd8174222c545ca714f0257c40b8e2ca3612bcd2fff","ssdeep":"192:iL34Xr4ZC4Z8NmZ48+fDNmZ48+fwNmZ48+foPF34XqGu4ZJE47Ej:OHZfZ8NmZmNmZZNmZjFabZJE47y","tlshash":"6e42a5bfe394a1b2e145d3ecce06d070251b24faafa0c6d486b5bf5e571404f1dada84","first_seen":"2025-08-09T06:39:58.935368Z","last_seen":"2026-04-15T02:03:05.922293Z","times_seen":62,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DfwoQPEh.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/DfwoQPEh.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/YlOf_41J.js\r\nCookie: __ddg8_=WTUXGcMiUqGqNkKS; __ddg10_=1761254547; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=tYhk8NWEekSmtymD; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-485\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1157,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1156)","md5":"8c8a6990a3518a2f59506a03ccd2f80a","sha1":"01fe4cc6acde6ae5f2d1e32d534ce698e3704c72","sha256":"a557d36f950831c7cf318c05b6303be42f065c8e687f34a3c7361f1c47da26fa","sha512":"88f6af5a771114c39ba6e8c15793b25bbc8c28b88cc78b716cc19371c505250b36567e7862f55999eb2d03d96f5dd26304af47c868bb99201c86fbf88dd12bb7","ssdeep":"","tlshash":"4b21006fb52d91e41b39ecd036d93818d1144f087446cdc0aceaee125832e8765cee7b","first_seen":"2025-10-23T21:23:43.144376Z","last_seen":"2025-10-23T21:23:43.144376Z","times_seen":1,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/CAc6Ks9r.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:28.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/CAc6Ks9r.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/BQfqbuLg.js\r\nCookie: __ddg8_=O2LlZ1ZBKpag6FJm; __ddg10_=1761254548; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=IodTfNbj8izsKaw9; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg10_=1761254548; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-1ac9\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6857,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (6856)","md5":"2246dbd1bb468f55b82d339c535f2c45","sha1":"925fbf9a0bd821296f8fe3dc84f938506215dd83","sha256":"f1b47c5154f58a1c0d5e74f60faefc61d9aa78f2b6366c03c7b301c3b5759770","sha512":"a8a9369efbc238a644a38286c37f6700aa0cfe618f7e34807a6490c7b9564b97a258d66c33c530176a49691820cb6ed411db926f6b6746069aefbb5a49d55f8e","ssdeep":"192:4GPJMSmZkgphq+Z3owRPV5T2wSgrTln+9h2JRz8En:PFmZkgi+Z3owRVswSgrxSh2JRzRn","tlshash":"72e12a8ff4498535d2f208de9918356252260bf6b10880e2f17c5d363f58ec96a5dfae","first_seen":"2025-10-23T21:23:43.147746Z","last_seen":"2025-10-23T21:23:43.147746Z","times_seen":1,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/espressogames.png","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/espressogames.png HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=8AcZ3qV5KjbEaGCk; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1296\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: \"68f899fd-510\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1296,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit colormap, non-interlaced","md5":"3ace5819ac2b5d62bdd1309abd1b08cb","sha1":"b526fbb6a5bc94360fdb050ff616ca21742a4886","sha256":"403267a769888d0d63629e2a4a14bb29039ccd3f5e30dbb3d4c3ab3053388a8e","sha512":"fe228a67da3efe86aa772937c1eb34232958bb3b3e0fb4a6144ca51e07ad1b3f3669aca53aa1aabd725096a265698c5dfa48cc51b95c677cfaf3326d53e709c9","ssdeep":"","tlshash":"7221c85fe386dd0cffcc67998fe00470cf53a0734b4a9d0ab4886819a9c21976de6362","first_seen":"2025-08-09T06:39:58.926279Z","last_seen":"2026-04-15T02:03:05.965677Z","times_seen":62,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":82,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/BtB77a5L.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/BtB77a5L.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/jSQlKdbM.js\r\nCookie: __ddg8_=8bFzcCjSgB0nLT3j; __ddg10_=1761254547; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iudoOMdE2XtFb8va; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-7fe\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2046,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2045)","md5":"dfc44e344a9ad22afaee554b70a7c9c7","sha1":"ca9c20243aca235b742c516291172f31e75eb850","sha256":"9b79f85da1c22ea6d55df696e27fab8c58c53dfc34dec332586c42c604ab5eca","sha512":"ce4a18a9250feac95dca065a37a0d5c6314edcd602b54eb9b77f1914ff5c049b3fde99ea272c0d3714ebf051cc56bbebad09adf6a6fbaec90c16d6527f2845bf","ssdeep":"","tlshash":"b141938eb1545e3063d7e1f19009a10087599f2b39ac81c0b925b7c3022697ef8cba91","first_seen":"2025-10-23T21:23:43.150991Z","last_seen":"2025-10-23T21:23:43.150991Z","times_seen":1,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/IcAGK8rsSoKFLxIQ1c6sAX5GaB8NprJBYDZUCmGE.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/IcAGK8rsSoKFLxIQ1c6sAX5GaB8NprJBYDZUCmGE.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/webp\r\nContent-Length: 52922\r\nConnection: keep-alive\r\nlast-modified: Fri, 11 Jul 2025 13:37:42 GMT\r\nx-rgw-object-type: Normal\r\netag: \"5a2f747da7d78cb5cc737a923e62e34f\"\r\nx-amz-request-id: tx00000c9e29337ccd7541c-00687113a7-165866ded-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52922,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1380x736, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5a2f747da7d78cb5cc737a923e62e34f","sha1":"dba040d146830993638ba0b79258a5464be2272c","sha256":"bc69ed55d7377a055860214d481871ab43570bb677d2ff318afb2f8c3b84e3b2","sha512":"386dba7c18ce85a50b0f22806354e74077a90d3d75d283842b172c1df1d943381b290b3e9dc2fcd34a73c5d5302094c4313b1850261966a597923e09c9ef0a76","ssdeep":"768:6tZfvQp6iytc6tnMkDzmcG0fbbwZLcDU0Mit5JpBz+zhHW6xRmxmsbijG47EzYHP:8ZN5tfz1FvwVcAEpBzuh26e2jGeEzA","tlshash":"2e3302542bfb8d681fe6603e5a8da9c3279964c0030fe98c7df9266c81b5c5c0a163a3","first_seen":"2025-09-09T11:33:29.133055Z","last_seen":"2026-03-01T21:47:53.212166Z","times_seen":26,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":211,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/batch/","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"13.216.81.40","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:33.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 15 Dec 2024 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:07:A5:B7:4A:00:EA:45:09:50:EF:4B:44:63:83:38:E2:97:F8:13","sha256":"6D:1D:1C:48:82:61:EB:EF:E4:D8:57:9A:EA:F6:ED:0A:07:BB:6C:17:71:6F:A3:F1:88:57:DC:E3:A4:E8:44:96"}}},"request":{"raw":"POST /batch/ HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.gwcz87x.life/\r\nContent-Type: application/json\r\nContent-Length: 1474\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 21:22:33 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 0\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-07-27T15:00:55.089381Z","times_seen":42052,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/ls-cdn.amplitude/plugin-session-replay-browser-1.4.0-min.js.gz","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /ls-cdn.amplitude/plugin-session-replay-browser-1.4.0-min.js.gz HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=nrh8Ho07bjRKfr0F; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=EWs2awqrGf1MC81a; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 07 Jun 2024 21:58:38 GMT\r\netag: W/\"ead49d69bc7839b0b873b096d418e1ea\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nx-amz-version-id: a9eB74QCYmN.zM7i5ckvNX3RYMk8LisI\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: AMS58-P6\r\nx-amz-cf-id: 3OIZalJ1kj8DZRD-JrOFASXdA0Vkxp3m71b8iI8BjrP-5_Y9K1Ns1g==\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nvary: Accept-Encoding\r\nage: 3\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 36580\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126923,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c19b1b5d91c8d683b1310562d9c4a225","sha1":"4d45dcac5c6a88e10052f4e356b2170c20413441","sha256":"bb5779145f1ebdcdee053876a4ed060174dda4656978972304c79ddd5f36dac4","sha512":"3a4e8d2e8f5d9a3b45c08ce99374c149a5b67d04d016edfe6259dfbbba948a049301c0cfa5f9bf334cb93b9b4a3558cffa725c166a943c90834c8d2237a1a21c","ssdeep":"1536:Ask/3qTBpVX0Ib6vhb2pJkuppl5METErM2jnpkDtoT1JaM18PIQunrr9gltn2BE/:IqBfX046vhb2pKMQt1Jawi697w","tlshash":"4ec329deb397b033539355a980bb0101b73a6a19300d4464f62ad9ea3c7d847a277fbd","first_seen":"2025-08-09T06:39:58.991299Z","last_seen":"2026-03-24T13:49:06.781634Z","times_seen":48,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Chd1ThOZ.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/Chd1ThOZ.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/CC-JJjPk.js\r\nCookie: __ddg8_=kXuItyf5t0D6HwUo; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Z87ve8XlEy9B4fUf; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nddg-cache-status: MISS,MISS\r\netag: W/\"68f899fd-47f\"\r\nage: 0\r\ncontent-length: 645\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1151,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (1142)","md5":"317a2201ef3851dba19e8b41380c8518","sha1":"69f8afc7452ae5bbffe308672417d74ea784cee0","sha256":"64cbae9ec71c97c3ca661b3a42c7f0de57972f702378830b7911e5a148b1cb0b","sha512":"4d8e02b904019b8bc965749301e7a14aa67543e54a8b2a19862be134620f94b55e7a2481c50590bf05fc5b7f6ce8e54746b77e238fa7b3a83fbaf81345be42c0","ssdeep":"","tlshash":"372130aebb3aa7bc7c245a5f42306f30f0132096ffb8945cb8d22126e3425a155640b8","first_seen":"2024-06-08T05:57:25Z","last_seen":"2026-05-26T01:50:53.816934Z","times_seen":119,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/games/casino/currentGames","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /api/games/casino/currentGames HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=cGiRQh22ofTStXXe; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg1_=tymF3Q3kZMtf69L5fWtz; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 87\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 698166c1-5293-42f4-9631-4ec8de674ecf\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1615,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bc72edb206bf8e9fa8decac6ad565d41","sha1":"eb97963e9a27143576fd707e4209a73ae39fbf29","sha256":"c0e32a2a4f5f54c5ca5f299dfd4c6dcb9e50ea9bb8bccd67226c40f9094cb528","sha512":"b75921566ccc9b4873026a4857a82c64d85cab61292b48f9f7426a35e93f15fb0ca4a9ed77d7fb0a8536c09f054bf31e54529c5508557a1a8a3eabb2eb0194ac","ssdeep":"","tlshash":"eb31f1da759808ca851847609e0f7be834cc297f164a4e864debdd35c640dfb78a0a76","first_seen":"2025-10-23T21:23:43.161108Z","last_seen":"2025-10-23T21:23:43.161108Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/ef5aa848cb6234dd6ff6a4610bfb6b8c8ecdcf96.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/ef5aa848cb6234dd6ff6a4610bfb6b8c8ecdcf96.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 23538\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 185081719F30778E\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 1564\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R6fa7aHu%2FnL7%2Fzcz6ezrI8ganKbKWdTHsPom6PhwGiKJ6iRxL%2FH6N1M4vx%2Biz6TD12QvX4oQ%2BVFjlR6xtsW6IxDw%2F5X6BcoD4BcXmg%3D%3D\"}]}\r\nCF-RAY: 993390a8fadff5bc-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23538,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"21714aced848c5429bdbc1e1975dde05","sha1":"3df268e58050169f784d896ba59ba9364269f9ff","sha256":"63e2aca2d1ea721d14bd2424e9129963c19e7153e93addb1986760898705d611","sha512":"5d0f92ddf152117fe20879d2774ec0036230a8b58df63f284a5711e16cfc85896938238fbe9ba93a8d44e65db9a2195dc8b9f237a9de6211addad34cc5c942b2","ssdeep":"384:TDMXpTYs0PeRjCI91ZFECgOXyX0EqSP8mb6yg7jV0VSQlMrPQTmG41/JDKSAmL:TDopcMRjCI9pEPORSfufj+EQlx6f1BD/","tlshash":"24b2e0b06e40fa1a2e27d547789510f8ffd1fb65cc4ccd1560b9fa8258e156e9873c02","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-03-01T21:47:53.241668Z","times_seen":66,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":256,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/images/upload.png","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /v/images/upload.png HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 5607\r\nLast-Modified: Mon, 29 Sep 2025 21:14:19 GMT\r\nConnection: keep-alive\r\nETag: \"68daf6ab-15e7\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5607,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 252 x 192, 8-bit/color RGBA, non-interlaced","md5":"7b5802fbdfcaff9ccd0826fa008c38ba","sha1":"bec3747315222740af2524067fdb193ba5cd3dd4","sha256":"455f8ff96a7775e51c6766e041b6d94f324729236e4f11cee602d5374d4c70e6","sha512":"0b0a952f2f4ee0b4db1f8d195fdbd81487e6c34b2b1d72a3fda1870c6d8eda43e4291e2a0cb5a060e75644ee6dbc2e1e2932aa10e1027b578d4691c87187b26d","ssdeep":"96:bJ/0V4UQ9C6HWpAK6a44RkRMeUkucxOx5QUR6eDJHV7IlH:V/2yHWpHiTgkucxI5QeDJHV7IB","tlshash":"7ac17cf769d8da9a70dfa9e043237872f8041b2bc6f0f356a8298097bf15c41f961301","first_seen":"2023-05-01T22:32:10Z","last_seen":"2026-07-26T15:38:30.84566Z","times_seen":2295,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/BDhHT3KD.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:28.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/BDhHT3KD.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/QPlbqdGQ.js\r\nCookie: __ddg8_=ic9CTHSgy2lyJnId; __ddg10_=1761254547; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=VpD5wllAS8p9WDxQ; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg10_=1761254548; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-20dd\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8413,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (8411)","md5":"4bd02986e01eb3e94590a19c88805efe","sha1":"c57ba5ad73c2aa745e85d23ea7182495377096f5","sha256":"73e70384a9892abd7165ccaeff284f60a56d2e341f9472b3652c13a1afa60d57","sha512":"6a212832f960c9abb6f5a6b1d2d7473e7a6996a8117bb5df846b1cbcc10e4da5193e621d98b523f65d448591ae15057e5a291bbca2dd34f4b1f49b32a04cefa2","ssdeep":"192:rFWTdVAnpRh4jyMSWQUtl6ZXg9XsLDJO+cOhQ6FqUwNp2wECoks8SrrfTfk0yCqw:rFWFN7JB+QWI/NXsXtOgHxKu","tlshash":"fe028658c42a85b0e13b899e59c44f513f5d2fb24451d8a0b4f86a3d3b8a870337ef6e","first_seen":"2025-10-23T21:23:43.164349Z","last_seen":"2025-10-23T21:23:43.164349Z","times_seen":1,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/analytics/events?event_name=time_first_load\u0026pgi=GTM-KN757LMM","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"POST /analytics/events?event_name=time_first_load\u0026pgi=GTM-KN757LMM HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 620\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=fArroHWCnxdoyYDh; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=UyHCqj8ZvnLe4ILr; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T15:05:58.256156Z","times_seen":17565140,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/ThreeOaks/13475d8ae79a47b9ab864b8c99d1c41f.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/ThreeOaks/13475d8ae79a47b9ab864b8c99d1c41f.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 27909\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"4a98cfb3ada38b3d88ee47f29ca3a9f7\"\r\nlast-modified: Fri, 20 Oct 2023 08:19:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 186F50E0F7547913\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 5050\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dXz4Ji3LwYeZh7N4bRJmD%2B7Cip%2BIprTrN7QYSC4bDiFxVJefFO%2BEg6VjYitLFMK8Rt6ZGmPBmqPQQjEvw93yRQSyAGa5yWinpqxA6fcF\"}]}\r\nCF-RAY: 9933af371da09fc3-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27909,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"4a98cfb3ada38b3d88ee47f29ca3a9f7","sha1":"50724d58eb2e5f1cc96d83186bfccafe0053d5fa","sha256":"8164bef11cc409666cf73f882967845bc9d2dc64174acfdc8d330a6cfe09f7dd","sha512":"e23a250b8ffffe3305a0ea58ccd0574f20bbc7ed0e954bb16a512054173ceabb1dfa556d9f9a69299228fa2c567bad309ec93dd9e7e27bf34ce8da5537f30c51","ssdeep":"768:O+WqAchrLN7L0/xCatgWIK7IbQKQSIqE4d:NbzhrhF05IK7CQKQSBE4d","tlshash":"42c2e06254434e8e0ebf4ace1f9595e987a3dc786f98b117dca32b82634012899de173","first_seen":"2024-05-07T05:57:00Z","last_seen":"2026-03-01T21:47:53.410872Z","times_seen":86,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":240,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Loading.Bk2PI8_1.css","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/Loading.Bk2PI8_1.css HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=tq3Zs6QJkJoGyKh6; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ylL9bTAETkjle3sM; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-ee\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 144\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":238,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"972ff87ed4252206f8f9d733a46cb522","sha1":"9998cd5afd3ccbd6aaa949b68fdf49bf05224cdb","sha256":"5ae8f77f7cb1ee4548d819e6f03fe4e3fbfcc50845c8ee77480d3f08a86de00b","sha512":"1dd31797719cb3c45a9694f1e7dc1bafddbe7da579d78d6aba797d4599ac185310493de67489970b64846b0d612979cae66138ad87b50721b24adbb78cfcc180","ssdeep":"","tlshash":"51d0a7d5864444530f670a3311cc5d59c8b02ec2c8be1c1eb399d1aa03492a933b7e69","first_seen":"2024-05-07T05:56:59Z","last_seen":"2026-02-25T19:06:54.055809Z","times_seen":57,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DIbTYh-3.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/DIbTYh-3.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/CC-JJjPk.js\r\nCookie: __ddg8_=kXuItyf5t0D6HwUo; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; __tld__=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1sSu7bFjnOpZHvra; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nddg-cache-status: HIT,MISS\r\netag: W/\"68f899fd-143\"\r\nage: 0\r\ncontent-length: 259\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":323,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (322)","md5":"dcddb5f6b70b36edcfa0cc3d5bb3576b","sha1":"b4219dbc3b1c5345ebb6d6cfe50619fdd1865964","sha256":"b61eb645e42eb2c9170d192f8507476f34e4a1702bc6569089d88aa1387187e7","sha512":"c0ddcd2da6950054040441aa6b52bccce9894b2958b4147892e9aa58e4f85fbc6ab3171c26603fab35d9387bc804acaf5b23d66645f08dd8dbac2207647f66d1","ssdeep":"","tlshash":"48e07dca249644ff23686fdca76260b0a0380704b349fe49631dcde3770238a8093e7e","first_seen":"2025-10-23T21:23:43.192534Z","last_seen":"2025-10-23T21:23:43.192534Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/f1ea0268c65d44babe977efe24e26c4e.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/PragmaticPlay/f1ea0268c65d44babe977efe24e26c4e.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 21180\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"caba909a099d14aff6a7e561c32c1188\"\r\nlast-modified: Mon, 06 Jan 2025 19:15:51 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18507B24A9C70587\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 2864\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VzmKTu87DtqxdFG2joZoROOnhhEfNKRJ968CRGAi5GmHLM2JOSE1tJr4OF9CXLqJah4a%2Fzd8lo8VhzJyO015PzCFNoBV52%2BwVIwJ9A%3D%3D\"}]}\r\nCF-RAY: 993441877beaf5bf-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21180,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"caba909a099d14aff6a7e561c32c1188","sha1":"19ef91a29efeffce8f0b883fa8dcc3eb782ab517","sha256":"a76fd0f65594c7272a36473700435e11c4d7f11e09b9be692ae123c798636459","sha512":"1567b26d6dd3d5e58400f361d601081a7e47acb6bdbc3e5dfb49ae1a3cd14dd36512e5fd5a4086d635effb29ae88d23617e8b4a916dca64254c172f523225f11","ssdeep":"384:w/4xu/kaWg3JOlpnipL/3cX/PGo2kcuHPSVtBuuuUQybJwXWKxIp8zMrGSR8:wwxRRGJeQYHGFxbXYKpbJGxISzSW","tlshash":"5492d1094bf9533eafcb4a44b638d3536791f86b2ec4c5a44746df0489ad57058cbbb0","first_seen":"2025-08-09T06:39:59.151237Z","last_seen":"2026-07-12T17:41:43.893341Z","times_seen":49,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":203,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssogtx01.cc/go/auth/code/check?url=aHR0cHM6Ly93d3cuZ3djejg3eC5saWZlLw==","fqdn":"ssogtx01.cc","domain":"ssogtx01.cc","tld":"cc"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-23T21:22:22.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ssogtx01.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 05:55:00 GMT","end":"Sat, 13 Dec 2025 05:54:59 GMT"},"fingerprint":{"sha1":"85:B6:FE:D4:60:19:28:2D:C7:FA:03:A6:AF:30:8D:4D:A4:C2:2D:56","sha256":"A5:B1:3F:85:4B:67:96:6E:D6:6D:B6:C5:DA:59:E5:40:9E:62:D2:47:8D:53:A5:8F:39:58:84:83:5B:D4:1C:FC"}}},"request":{"raw":"GET /go/auth/code/check?url=aHR0cHM6Ly93d3cuZ3djejg3eC5saWZlLw== HTTP/1.1\r\nHost: ssogtx01.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=gdpYcz7hcjSLK13s; Domain=.ssogtx01.cc; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.ssogtx01.cc; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.ssogtx01.cc; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg1_=u89QEEqrmqmTxX3n0oUT; Domain=.ssogtx01.cc; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: private, must-revalidate\r\nlocation: https://www.gwcz87x.life/\r\npragma: no-cache\r\nexpires: -1\r\nvary: Origin, Accept-Encoding\r\nx-request-id: b84c73bc-8089-47ea-9201-7129e870053c\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":406127,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T15:05:58.256156Z","times_seen":17565140,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":144,"dns":66,"connect":18,"send":0,"wait":117,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"ssogtx01.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"ssogtx01.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/api/v2/tracking/events","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"OPTIONS /api/api/v2/tracking/events HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: PUT\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.gwcz87x.life/\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=In5Nzg079WOoFJeR; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg1_=xcuSgASUoLG0Tr4eeZea; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 86400\r\nx-request-id: e91d41c0-73ad-4fba-b06f-1251831c58da\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T15:05:58.256156Z","times_seen":17565140,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/b533e8ba711eb7fef8a694ee73ae082c.png/oJhKImNnZQfq6mQkjasFuYjsLbEswG3G8hLW2amH.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/b533e8ba711eb7fef8a694ee73ae082c.png/oJhKImNnZQfq6mQkjasFuYjsLbEswG3G8hLW2amH.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 462515\r\nConnection: keep-alive\r\nlast-modified: Wed, 16 Jul 2025 13:29:18 GMT\r\nx-rgw-object-type: Normal\r\netag: \"9cf315bcb928defe08150287b604caf0\"\r\nx-amz-request-id: tx00000c1c8b2a9b773b8c1-006877a92f-166dc57f4-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":462515,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"9cf315bcb928defe08150287b604caf0","sha1":"c51742d98ea2a05a8b9c634021d5650e560877fc","sha256":"4cdd3151236420f31ca996641d610792403d7a5a1806b485a667bdaafe581998","sha512":"9abcb8236e87b046159b7a614be94bd4a1c8bfc4f39f4c26c41eaa9892c0bc2162a73528753edcf84c9bf8264b264f1481f07c62f9cc96d2fcff80e939e6cb9f","ssdeep":"12288:rKLvq/4MM4/qRSBlPeX9FRXIpg90btSdFgJczWQVPry:rMqwMMAqSBRCqtcccjBry","tlshash":"68a4235930bf813aa5f29e60a3e635f312a6091eff5346c42c7ecc647b6d1a14c846b3","first_seen":"2025-03-21T05:40:09.027316Z","last_seen":"2026-03-01T21:47:53.268796Z","times_seen":40,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":159,"dns":57,"connect":46,"send":0,"wait":88,"receive":180,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/api/v2/tracking/events","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"PUT /api/api/v2/tracking/events HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 106\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"PUT"},"response":{"raw":"HTTP/2 422 Unprocessable Entity\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=GyH9JyaEYuj8I3Uj; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg1_=lhGHgmteQK1995NuJUy3; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-request-id: 1eabed4f-bfad-4641-be20-070af47a4a13\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"422","status_text":"Unprocessable Entity","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":66,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5ceb977343f5f86c7674e2180efc5c50","sha1":"892ff9e94e8c31ead1f630f12ac8d2d7a9df0f9f","sha256":"a8a3a40dfaf41ec11848e97d659097e9d0d5ed756aa5b3dd8c9514ee193b4268","sha512":"fb66adc58828195706b3ae22037fd96f60b6afb4685a852448cc3590ad65a77189eddbfd0cf2ad414762a42450b5fb3664547a6f20fe1ae511a72cf2a02ac620","ssdeep":"","tlshash":"31a0024618891d6f5f6341de7c51ec9211a6a0d444767c07001dd0e87a10a7b9e53355","first_seen":"2025-10-04T18:13:14.660433Z","last_seen":"2026-03-20T10:12:14.627928Z","times_seen":3,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/games/casino/common","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"OPTIONS /api/games/casino/common HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://www.gwcz87x.life/\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=gdduaXdbWiXzcdjI; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg1_=aawPWyScEsd1cdpKYA3y; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 3eb64753-8aa7-43ff-ac0f-274c3db6ecc7\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T15:05:58.256156Z","times_seen":17565140,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/games/casino/highRollers","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /api/games/casino/highRollers HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FIQvgU5jbHmxFPUn; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg1_=UV6u9er78KShQcLk5ZH6; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 89\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 3d7426fd-f4a4-489c-abe8-f4e76fa176d0\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1645,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"96f160f3387f7d10206f7487e960345f","sha1":"1dfee57a2f4c56b28f41628470c3799c9f824db7","sha256":"dfc0a7539a808bc07fae5df94a9c369dec58b9799698c94607e1c9a78a18b16d","sha512":"b46401ceb1fcdfd75de05a3f0940bbd6e6b3d46b09a8b86d2342075a2248f9ed44fc99ca865447a8b9f2cece142e16511a420f010f0012143119089c640fb52f","ssdeep":"","tlshash":"5c31f48fb99408edc86856659e0fbedc71dc742f228b8e86489fdd3681409fb6c54837","first_seen":"2025-10-23T21:23:43.221452Z","last_seen":"2025-10-23T21:23:43.221452Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/sounds/click.mp3","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /sounds/click.mp3 HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=3GEQ9p5cNlWL2fLR; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fArroHWCnxdoyYDh; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 6731\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: \"68f899fd-1a4b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6731,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"b497ee5b7f24d5540859a2fe9a2f94a8","sha1":"402f32b8a0c59a6655cee008020948c8b0dc3878","sha256":"627e28dd820dbe208a2d764c086b4eca2c54330b9741073bec9da852aa592962","sha512":"1f0e4fd80c187354ac665cf7e3dc52b8834ef35022c6fe922db3aae0f89f8530c5e97aa2d4860f2351c8fbf05ea2252593d626d12b8f90865b7eca6b6a476ee9","ssdeep":"192:79qf6EhSf0IotHNKWliJRgFn0DsEZM8+h/wgMgl:79qf6ASfCtHtliJ2F6sEZMph/w1gl","tlshash":"cad16d6a6d478951e40c5570d8ce1b4c737824b5afb0b3daa267f79e00e536c12ceb29","first_seen":"2023-04-10T18:19:05Z","last_seen":"2026-06-26T20:23:29.963181Z","times_seen":1246,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/locales/kz.png","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/locales/kz.png HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=y8mcLihooYsACKeY; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=rHBNT28P6PVT0Ar4; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 1409\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: \"68f899fd-581\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1409,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"7a701954e3c39e96dee200a2aa97513b","sha1":"7b814ceaeb3f31aeac0a2ee34465ff6d9f149f0c","sha256":"60b4c06718aff3b9bd2ee484a9a9148acc5a3de674f435d9975bde16da6a706c","sha512":"5ddd3dfcc9272b7f651666ac1e0865c1a49ece72f8bf25acbfea391f966823054d01bbae3c3d3b0e02c25f1f95f7a4c9c4abd205480b46dfa6e1654f6aa8b976","ssdeep":"","tlshash":"3021e9d429de0038b80ed3a7a3cf6a65fe7598d41513cc04be4de0454336ac40064b68","first_seen":"2025-08-09T06:39:58.798537Z","last_seen":"2026-06-06T23:27:45.170448Z","times_seen":113,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/Endorphina/3eed0db93300b1759e8dd2edfe5862ada1086eaf.jpg","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/Endorphina/3eed0db93300b1759e8dd2edfe5862ada1086eaf.jpg HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 25657\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"b3c61c94291b716c00d46c078220daa9\"\r\nlast-modified: Tue, 21 Oct 2025 13:16:02 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18711170153A919E\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 42\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZDwNHMXsH8e%2BFxFX%2BAkMfNPhNEir9K767eonNidQt6lcI7862nvveM9Samou5sMylEda1iW7XolIPBKAO9RFfNWfSlzmXyHD6y%2FTjWwQ\"}]}\r\nCF-RAY: 993429b2cba32956-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25657,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 287x193, components 3","md5":"b3c61c94291b716c00d46c078220daa9","sha1":"2ea3181998aa3189e4f9faf95e830f3590351561","sha256":"94855f07fd17b4d1fc50ceb7f93b0fbe373ba2dc5f8730297abb491f71192ee9","sha512":"123fee27c81a5243f8c4981056965489abb4101f954447430b5f1d3ed064dd00d8a1867db230a285551b93511b046281e4d89a60f0fc33b599a65236b93d9c29","ssdeep":"384:DSmgAmixUwY4tLCxAQTpPme6hMrXg1lVK+/LtTcHMfS8EZNoFdH2ZH02nl7iymRm:+mMcU4GxAQ7T+/VUMFdH2ZH02RiymRm","tlshash":"0fb2e0e984e9a63cfc2c31b16856f00036d5c64a19d4135a715aa72fa3f48413ed5f3a","first_seen":"2025-10-23T21:23:43.242298Z","last_seen":"2026-02-12T21:37:49.709104Z","times_seen":7,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":225,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/yggdrasil.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/yggdrasil.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=hse9PCVoo4LM2Nb8; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-645\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1605,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22ab76fd2733beece31d373c5e90fb94","sha1":"e6497bfe5c5b19a7c8f26dc2a802e85568e3485c","sha256":"64865a4891c08014fb03901360fa286e30c8da4b91e2304deff972033bfe9033","sha512":"3fdd3bea110dad310680d49d03f84a317c21f12802e7e3e5cd88862c7e72b2ca0c2fed8c6fe428d9ead9bfd3f2aaccbec5dd583ad16280ae40513b89ca063b4f","ssdeep":"","tlshash":"723141f7e39892d0ea069bf90a1b38b1342b3ce73d63c58d59566895f19019f84d4cc7","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.898772Z","times_seen":69,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/entry.B0BOi0i9.css","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/entry.B0BOi0i9.css HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=cq9xLBE7xxG1EcLE; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=pBfAca59XHahXMG9; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-1080\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 751\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4224,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4223)","md5":"61f0bd26cea7d117c5e7c486acc68d00","sha1":"6c8bcb0f1c4f0fb0f07276c5eacd898124ed10df","sha256":"f099b430b92e0f00145cb9382b4a9ae5fd988a1e4f4bfb3043e5a938efc4ee39","sha512":"f9bc1136e2349b7ac1471ec7801d8047312f950e30808796e33dcc45bdf4cc68b709d9a30c6ae3f2cc7371b4d47bd532b8cc59e09569e52f1d9a1b30cb0b91c2","ssdeep":"48:qBK1KVrwxo7yXr29OKJgbKA7cb2XYKBKJKeKbKaeEaSkeEnS0SSSWS8VSfHeEPeG:qxi8yK9RHN4MEBWWXIShv7JRhW4D/qi","tlshash":"4491ff7fb288f6580127ff02a4a15bddf42b23b0b2522a15f2d5523061b67d1bc29d7c","first_seen":"2024-05-30T05:56:49Z","last_seen":"2026-06-10T14:34:42.966261Z","times_seen":189,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/8gjymX2c.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/8gjymX2c.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=xnOodYOWtzBVM52n; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=QqdsWoFP84d8QVlo; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-length: 2063\r\nddg-cache-status: HIT,MISS\r\netag: W/\"68f899fd-142c\"\r\nage: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5164,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5163)","md5":"9ea452fd7ca8f740340f5037394b8648","sha1":"ba3ec376e700985891799f79a26d1f9454630c2b","sha256":"5e9d220e027bdb3c09d97701d87934192c515d59c7a494662500c319b7af9b68","sha512":"f9142def794aa47a52c4297d6f21934e6a2947911fe7e1269c53d218f369653eb330911025b66ff7fee5ae124f6631cb4c7de69b73205a22804aa2abb677a936","ssdeep":"96:mq53hKMoKMj1j83LdeFp1f5HnPx1oRstVCBR4Ir8DtgjEby+EUECPRv5:x3BY1j83sFjvmQVCkIgPb/D","tlshash":"9eb196d4b0d9e0dbb7764fd1c036225260076ba57834e0d0f27aad73215be58a562b3f","first_seen":"2025-10-23T21:23:43.286682Z","last_seen":"2025-10-23T21:23:43.286682Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/ext/cdp-customer/v1/analytics-js/snippet/233e4c5f9379d04ec864/analytics.min.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /ext/cdp-customer/v1/analytics-js/snippet/233e4c5f9379d04ec864/analytics.min.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=QqdsWoFP84d8QVlo; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=130fQvtvcvotkQjp; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\netag: W/63cded814d76830c4a89761ebeb3242e\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: public,max-age=300,immutable, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nservice-worker-allowed: off\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":106254,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"009ba376452e3bdba0f98538c0575d44","sha1":"7fc6cb65590b122da408e8206cbebe360498ffed","sha256":"c31bef488aa8dee63ffe8601ea74d02285c0e9f189ff5540a94637b3a0fe99d9","sha512":"925ed13622d0b785921820f1b52ab0ad19ad44b8467ec1e15dfb03c9327dbd16ef037e1f11f9fdf80cbc4d9104c08a62c02b4651786efad4547aa5dc11dfe89b","ssdeep":"768:0xOyftQBCLo1sw/cexpme6piT5nQk8v2RbgFoF4OnImsSfWdLyWQL9ZsBpi0vRxv:UtQBQo1sAIeaE5Qk8uV4oF4OvpU5xMMf","tlshash":"d6a383c8f6e6f060439364b8803f110bf23e795e680e84a4f266d9d66cbc59d9127f79","first_seen":"2025-09-05T15:12:16.336085Z","last_seen":"2025-11-07T14:36:24.450735Z","times_seen":219,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/Endorphina/0fd2890e79e4ea735a0a92ab86ad205b409beb4b.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/Endorphina/0fd2890e79e4ea735a0a92ab86ad205b409beb4b.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 36524\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"ce1c0a0686b09b8a3d4d78b8e1733d5f\"\r\nlast-modified: Tue, 01 Jul 2025 00:45:14 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1850C0F50D1D7C69\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 2508\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iD1Mua3pqnFKy%2BO0Vr9tTKCuHbLkeaXJDOXBcLqHW2d%2BtSjfM0bR5RRSTAuibuQsctjh7ZfZIYHTHBTWKvP1WclOWTn9TygJIspMn%2Fbz\"}]}\r\nCF-RAY: 9933e7903c526668-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":36524,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"ce1c0a0686b09b8a3d4d78b8e1733d5f","sha1":"4008e154e32b614d29dd16b6291a5543e462e941","sha256":"43b385f0e8a350d2d2c6241789f41840f4eb0af8ba0f15c0eb4a143ec56d3b15","sha512":"e1058d61c715b31763a9aedfbbf0ea1a56a6ff0c5550732ee16d6bf0b1e8bec8f066f3e27853e91000ff2e58accabd0df40c200ddf6b854be544fbb6f390380a","ssdeep":"768:vRVjKpGLaJehKVkRTwCI99rhho+of/i1qeqy8daU+mg40:vRe2MMVIzZeaSaUfG","tlshash":"aaf2f1f2a9533082c968f59b29fdaf9e215715e1cadc04ce21e7169ecca2c4752a71c3","first_seen":"2025-07-10T10:09:16.279699Z","last_seen":"2026-01-21T08:18:56.836181Z","times_seen":209,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":246,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/805e294072873e2afdcc2f500913568bac1a6ee7.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/805e294072873e2afdcc2f500913568bac1a6ee7.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 31160\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18533EBFBA763318\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 346\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=siXhPqdz%2BTv2P9wJt7H62w9LZ6RtWk0B8YKWr9JDflY%2FeiUZvxBxBwLZLjBOjqU1o28wCK3qWKb9aC6EQ35vQOm9KZlpchjGDD%2FStWfq\"}]}\r\nCF-RAY: 993337d6b9e8ae32-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31160,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"d9162bc1c1e7d67d56d701707a87b9b5","sha1":"aa450f1f4897d30cfda4acfa4c85f62229ecd472","sha256":"4c56057c81c292ac2a61c2f74001156361db602c8a9d3a72f7ef7a9dc9eb4154","sha512":"875b0e7533ddce7566153182fc1911cd7eaf4c6157699132081aa32ba3963dc87bb287e5f2da97c3ba0e2c171fcf3b5c3ccea021313000adf5183b2d9fa4c2d0","ssdeep":"384:09RNdhLsCaMS7aNCElmgxXlEN/g3Ur479MEJg/71dD3mbx11GZYHs6tiqlQa6dOx:0PtgrN2UH/g3Use/7LD37+1lXNAcvNL","tlshash":"b4e2e04d867c866b232c4f33081847f8ff2497639fa523c650ea895d23295c923868ee","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-02-25T19:06:54.219522Z","times_seen":69,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":246,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/ui-resources.php?location=eng\u0026mode=desktop\u0026lang=en\u0026f2aa63e1\u0026callback=getWebimUIResourcesCallback","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /v/ui-resources.php?location=eng\u0026mode=desktop\u0026lang=en\u0026f2aa63e1\u0026callback=getWebimUIResourcesCallback HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: application/x-javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Mon, 29 Sep 2025 21:14:19 GMT\r\nX-Cache: HIT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":609915,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"exported SGML document, ASCII text, with very long lines (65536), with no line terminators","md5":"7e55356ce407a94b283b927d0d1891eb","sha1":"c4df278d2805228c19f206d3224ee208a74079c4","sha256":"3cbb11fae1c8c17d14bdcc229e66590f878aac68756f4a49ef63cffdaa8f0ca2","sha512":"127190fab5d96de44e4e5bdcc09de39d72965246b37ed42b40db9604baa1e80b27de9401fa7ac1ee3dd332522568b17e7d3d1b8ccc50139bdfe64e9050370321","ssdeep":"1536:QmHOcWqVj1g4iy5VkMj2KuRyME234CsF7s77bsasbsUs+sxseT5Ggr7uN+YaL5I4:hrSvyawQJ3gy5f9uZS44WkHD","tlshash":"24d4140feed21469be2bee6361f70651713d34a25590079cb26f34de2f85ce29322b64","first_seen":"2025-10-14T04:24:50.094418Z","last_seen":"2025-11-20T17:10:17.40148Z","times_seen":6,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-23T21:22:22.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.gwcz87x.life/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=SMo8yhowPaEoxhHz; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=yfzI2MyK230QOk59; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:22 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Nuxt\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":406127,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65057)","md5":"b73ab6ff7d6a938fcd350174b7c32235","sha1":"7255a7a378e9976101fdb20b416102d066657775","sha256":"410bab30bfbb708284be6a7874a514e0718ec886a6f04586f9141b17c56df9c1","sha512":"51e84a76abf065ea3e82e27e53dc9e8848a145527c037fac67ce5bf65b58aa5ac903a14a9ee91e719e44c2a33ad391fb291c22599251788354f50fc309755aa7","ssdeep":"3072:vZJYobqAfuybg1870qYOwfwONtsEb2F61UU1Bgu:DbqAfF70qYOwo4tsEb2FhU5","tlshash":"1f84d6d36630342ea16fd457f1a1eed8f434a815d31367ebe1e61a25cbc2c861673a38","first_seen":"2025-10-23T21:23:43.116801Z","last_seen":"2025-10-23T21:23:43.116801Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/pgsoft.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/pgsoft.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OjupeiJCuGxNNzI4; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-b19\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2841,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9c3752392106e2f24a698ff42c677c10","sha1":"9fa4438728981a8809e5dcdfc637e2a88de43127","sha256":"8ffe768b6b541118bc2297edf6b85a1003e9b9d68d1f535f67ab931b45e978c8","sha512":"98cad8f5eae13358ededd74e4cc015f90a8c26fb789ebf59789feec4af0f340cd8ab76de08ff0fcefd656c359e0a9f17ff6f82fe2907ce50e0403a79898c40af","ssdeep":"","tlshash":"fa513b3ee1cb3b9f325845349664915b9c46b06b0106211e6cd8fcb8f8c71b0ee4a9aa","first_seen":"2025-08-09T06:39:59.027853Z","last_seen":"2026-04-15T02:03:05.870747Z","times_seen":62,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/gamzix.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/gamzix.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=d4BpWwgTGafk7fwJ; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-7b3\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1971,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e82c459ffd4d8e01f72c723b935b7293","sha1":"c04f51efa3918cc9a14629e688cdc862a1be7675","sha256":"2ca28a038719a9cefd62e55589551c3eb405d828b2893dee80936c3bfa128579","sha512":"84b9d2ae06b5b76806e1c303b0eb5a147176ca81fa7eb5205694de0cd875d754e4fac3e12cdfdee5a9e558cb5d04c7de91981990df58830995cd2e5fa196b6f0","ssdeep":"","tlshash":"3e41567ca3ade1e0d20c97b583ad1179b27a38eb0f21c29d07bb2d95fa5521d40ad8c4","first_seen":"2024-05-07T05:57:01Z","last_seen":"2026-04-15T02:03:05.847166Z","times_seen":68,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/redrake.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/redrake.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1gJrJlTsEGctrvSy; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-474\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1140,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"447cdedbee546eaf230b81d11581f336","sha1":"1cd455621f752221114a784a0a099b068a66d605","sha256":"2d6319c433d15fe63757b80aa5a1fe4e272bf055a7c501ea4b75c243664d2c91","sha512":"0f7a8e4042bd770b50ff5ef9b02d83a6f23f4f3c93e0758003d072747d26a2cae3c13d893c92f04a54d4176307d663b8e7bb006d599999d65572861ec8cb06c2","ssdeep":"","tlshash":"6e2133e7f7cd42fea401e7f0d106ac78332b34b57a21cead13cc2824728604dc8a4402","first_seen":"2023-10-28T21:30:08Z","last_seen":"2026-04-15T02:03:05.934997Z","times_seen":68,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":145,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DJyngK5D.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/DJyngK5D.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/l9CMu1bs.js\r\nCookie: __ddg8_=3RwUFnpbxrXG4Xdr; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=aWqkG1XumUIXhEVV; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nddg-cache-status: HIT,MISS\r\netag: \"68f899fd-15051\"\r\nage: 2\r\ncontent-length: 25569\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86097,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"09f7bed55afc16a288abb07ee8b4d93c","sha1":"9b4762183025b609254d791c3b0dbc4f5e356d81","sha256":"7cdad479701ade61948dc83091312c222dc256792972c35cf5b3c740960dcc3b","sha512":"dd521a2c1fd79640bd81affab002c80f866f557a92b733c28b85f769d364df47dd7d2ee36d8803151a582b207e3f44ce20def05531be61d0b2eb72fdbe130117","ssdeep":"1536:fK6l28I8DZzkXhvPS5uLEiMAa73hBlxvHB+CIdzkVXiA6w+EV93mBE09:S6nCvPS5uZS8a9Q","tlshash":"b1832989f224b17782f75aca8376c20172a14984b809d4e4b0ed4d7b496e95c03afffc","first_seen":"2025-10-23T21:23:43.378835Z","last_seen":"2025-10-23T21:23:43.378835Z","times_seen":1,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/analytics/pv?pgi=GTM-KN757LMM","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"POST /analytics/pv?pgi=GTM-KN757LMM HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 495\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=81nnFKjWWhoC5TuE; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Hq2dxKbqf0U9PKzS; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T15:05:58.256156Z","times_seen":17565140,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/games/casino/best","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /api/games/casino/best HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Tvu4kJhNtFUPEw4p; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg1_=pst19OPSROcjpBPFKBjO; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 86\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 84c9a793-b1ee-427b-825f-a33ec7fb0358\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":10282,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"85545c98cb8a7068c55118722ab1f820","sha1":"b9826948cc92129da9bfee19c5426636680824f7","sha256":"9646476015a7193a95af1ea57f898989976cc2b59cc550ede735d362ca4a089b","sha512":"b430d3b2e39c53b6d854fbaa89afaa33c1f66530f15af23d985b5278333624919a431147986483ac25fcd2504b08f027bd644fa86e8928ba13304890b44e5256","ssdeep":"192:79p5/OR3azgnKgeUhEh8hDjDVNxFrnGuw:79p5cqMncU6+FBNrrnGuw","tlshash":"092211532a8038a24fe672e44f6f7f9579c80913516cb913f8caec6500a15f76329af7","first_seen":"2025-10-09T10:23:07.112044Z","last_seen":"2025-10-23T21:23:43.389253Z","times_seen":3,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/collect?r=3515821","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"POST /api/collect?r=3515821 HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nRegion: RU\r\nContent-Length: 56160\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=vG5izO9YmAKVX7o4; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg1_=rmw65HfiYqGRpDQwN9NW; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-request-id: 6bb56399-204c-4d4d-bad3-34d20127344d\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":30,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"11977a90f6bcc30dbb2c1096dfb33a52","sha1":"8cd52c68a113f8e4b3d8f141784dab663d3fd5cb","sha256":"8031180d4d982a471ca97ef5a04e8d013d003c5c19e80d0a5f45401c4463ec27","sha512":"ba256f5a6c4314e7f804a84cfd54ee37829b98698b373393d1e7061bee56e58df212dfb02cb039a78b644b8b0c4921cbec243e181aae5d89272a2835e48217ac","ssdeep":"","tlshash":"18800020ca802e2be30a02a2b20820800200028888c0280308082a0c020c80b80ea282","first_seen":"2023-04-06T20:47:37Z","last_seen":"2026-07-27T13:43:30.15653Z","times_seen":3757,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/index.DghLH_8T.css","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/index.DghLH_8T.css HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=x0UitSVpR8Zi2AfN; __ddg10_=1761254546; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=q0VSaOB3Q2KceSEw; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-12db\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4827,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4826)","md5":"e9c8484d14e49d421006fd266ad05a0f","sha1":"06c1d001a3c3ae4ef75cf857057b38192ca7c305","sha256":"d9777077b2d5fdca33bdbe68e95c61f950520737f3600db01e59d24c5884e5de","sha512":"b1cbf2e703c1a52f3b47e50bff600ad94d6c748aff818416ce6efcf1c4435ecd83206ac99dadec41bc30897ca18ee28df17cacf336b0e4da222a95647ba1b2df","ssdeep":"48:VKZlTORiawcVQfud6pKlBpSc4SGq6d3w+u61G1aWezQbtYtLwrysijNtZlCaOLK5:Ey5Od3v3Z8m0nYsq7N","tlshash":"e6a17531330c702878b7c583e9606d85214bbaafd563876ad66031399ddba933f721db","first_seen":"2025-08-09T06:39:59.091465Z","last_seen":"2026-03-01T21:47:53.351507Z","times_seen":34,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DgboFdNy.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:28.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/DgboFdNy.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/QPlbqdGQ.js\r\nCookie: __ddg8_=ic9CTHSgy2lyJnId; __ddg10_=1761254547; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=WMWvWR5GIwR7PPRJ; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg10_=1761254548; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-2ec\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":748,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (747)","md5":"816c4d1cb3424dab924ed6fb97b84ce0","sha1":"518fa4df6a73a91c30d24ee8cf35ed33ee49ad8b","sha256":"427dfa1d7fec9dc673022d08f5870adf87d22031200a945d3e5dbb2e59b2e4e6","sha512":"3ea555d824b911964e96764ff02307e1343e0d9d4f87799a4838d5aa049592c44f43f2c6ee1510561695646fb89ef7510d4ea1f53f370ba0281d89064e2da567","ssdeep":"","tlshash":"4e01bd8e247b65ec086577403cd84ca44ba1bfe5269351803e2c6cc08bd4c85b53903d","first_seen":"2025-10-23T21:23:43.418941Z","last_seen":"2025-10-23T21:23:43.418941Z","times_seen":1,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/vue-splide.C9Z0wB1j.css","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/vue-splide.C9Z0wB1j.css HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=tq3Zs6QJkJoGyKh6; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YQ9fBEwHMvMBH3Ci; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-734\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 676\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1844,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1843)","md5":"e638a23113de5c173bd45cf1ec17cedd","sha1":"5e71875f9d7d6d3240729a9300e2be7b2c49d0d2","sha256":"25fecdb4c8330c6bfab65a09dbb53c0d8f407344f2ba4f4438bb48293444c846","sha512":"c76d640e7077019c6c609684d476a47b812c67eb4fbc8cf85240d2bc6e96e5254434483c8c8046b15b3683e09c749b26055b48f9656e0dbf5d78bad8aa18872c","ssdeep":"","tlshash":"fd31442240c92f599843973229bdd7a964eec2534e6302baeaded320468ad4d07e49cd","first_seen":"2024-08-20T04:44:02.347145Z","last_seen":"2026-07-20T07:08:57.528836Z","times_seen":137,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DPQ_XqHv.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/DPQ_XqHv.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/Razus-0y.js\r\nCookie: __ddg8_=82yFQzxAXCtyCkhF; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=3XnMRZCskWe8SJdA; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-37540\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 42764\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":226624,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (35556)","md5":"d5a4a7f4727df52ec564d0ce81bcced9","sha1":"5b39a9fa811315ee0ceebb9ea16cb82a9f725d77","sha256":"8ba4fda800f64111d84006c0ac9640ac1b76bb828f258e94acf78f7876f88daa","sha512":"b2927eeb965963b31207b406f6b1ce2bc6845f7b1e61ed21265a5b87a4c87d5cdc1bae70ea00dfc0dd036fa85c90d7df598765a8af2e70bf6fe7f54233ac735b","ssdeep":"6144:cYuDKegAufVcvTgOg1mBRrUOuzLoHxq26pl5OaPydofbUCdxNtuGgSdI86:cYuDKegAufVcvTgOg1mBRrUOuzLoHxq6","tlshash":"5d247d320e5d1cbd1111a166de1cab1a38de81fe3e9b93e107796e6e35f10309ea931d","first_seen":"2025-10-23T21:23:43.444889Z","last_seen":"2025-10-23T21:23:43.444889Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/HA7_xM6x.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/HA7_xM6x.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=7tChrYS507NHdwk3; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PWc1wNBLECvQT7V4; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nddg-cache-status: HIT,MISS\r\netag: W/\"68f899fd-23e1\"\r\nage: 2\r\ncontent-length: 3804\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9185,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9184)","md5":"2ed80197c76fb5db20aa8d18a44a5262","sha1":"45386d7906c002b925648a74074a801869f018dd","sha256":"e15890d2b09b832d7e44d263fbb994948c177131fda8a3491e02f34585e7062b","sha512":"ec00ce2688207562f16bd15fd832eb9836a5c353d5e89b899686aa51963d436591e4b13d3e490491fb6deed7a4127434f1748d0b7a85b31d39913d072de173cf","ssdeep":"192:CyqsxSEFu6ZufGq++k5qQbZQ+tOWwYpsTctY0ipgNE7oVKRpXKlEp:CyhZ8fK+kQQbDLwYpfYZplOKRpXH","tlshash":"ad12fad473ec72aa59620dd12475481ee434e6243b26f4d1f2b934bab497c44b273f2d","first_seen":"2025-10-23T21:23:43.072866Z","last_seen":"2025-10-23T21:23:43.072866Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/C9s2rfPj.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/C9s2rfPj.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/CC-JJjPk.js\r\nCookie: __ddg8_=kXuItyf5t0D6HwUo; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; __tld__=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=WJCXB2CeGdwtPoZr; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nddg-cache-status: MISS,MISS\r\netag: W/\"68f899fd-603\"\r\nage: 0\r\ncontent-length: 810\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1539,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1538)","md5":"1ab8829226bdf84d9651be81a3efd961","sha1":"4dd97cb56c939d6a472b1e0a5a76f03184b4619b","sha256":"8ba116d4bcafe21d3de2af68bbb6b378b4dd161883394f01fbd883a9faa57690","sha512":"e9e88960da5d2ba57197cec58429a3fa70877b37e61b404fb90093e55fa6e77ae87bfa245417a48e0546b0e20be956340469f8dfa1ecbd08a0b7ce2358286cf4","ssdeep":"","tlshash":"0a31100c380960bb139613e0949e144ee218bd627a6bc4c5e2cc7d677e27599cc8efad","first_seen":"2025-10-23T21:23:43.45143Z","last_seen":"2025-10-23T21:23:43.45143Z","times_seen":1,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dr=www.gwcz87x.life\u0026dl=https%3A%2F%2Fwww.gwcz87x.life%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1405773222.1761254544\u0026dt=GET-X\u0026auid=623911282.1761254542\u0026navt=n\u0026npa=1\u0026gtm=45He5am1h2v9186219929za200zd9186219929xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480709~115734859~115734861~115938465~115938469\u0026tft=1761254543532\u0026tfd=1479\u0026apve=1\u0026apvf=f","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"10:90:B3:3F:30:77:D6:5D:F3:F1:F4:8D:D1:61:AA:F5:9C:D2:09:E6","sha256":"AC:0E:79:60:FD:CB:6E:20:77:C2:D3:75:94:E3:99:85:B9:AA:9B:EE:67:43:40:78:7F:17:FF:3F:6A:BA:05:CF"}}},"request":{"raw":"POST /ccm/collect?frm=0\u0026en=page_view\u0026dr=www.gwcz87x.life\u0026dl=https%3A%2F%2Fwww.gwcz87x.life%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1405773222.1761254544\u0026dt=GET-X\u0026auid=623911282.1761254542\u0026navt=n\u0026npa=1\u0026gtm=45He5am1h2v9186219929za200zd9186219929xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480709~115734859~115734861~115938465~115938469\u0026tft=1761254543532\u0026tfd=1479\u0026apve=1\u0026apvf=f HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.gwcz87x.life/\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T15:05:58.256156Z","times_seen":17565140,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/games/casino/lastBets","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"OPTIONS /api/games/casino/lastBets HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://www.gwcz87x.life/\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=vjkKVXzUS43Uz8Nl; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg1_=3IQHdD3nkDbET9IKqfVK; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 58c9fab0-3dca-473c-a930-363efeb3aba5\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T15:05:58.256156Z","times_seen":17565140,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/BUr0zCR67qQ4j0qMeOwPGX6iQEQIzlTbwUrAn2i2.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/BUr0zCR67qQ4j0qMeOwPGX6iQEQIzlTbwUrAn2i2.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/webp\r\nContent-Length: 133840\r\nConnection: keep-alive\r\nlast-modified: Wed, 10 Sep 2025 13:37:57 GMT\r\nx-rgw-object-type: Normal\r\netag: \"d204cfc6e81ae9a03f7b2fb229231fb1\"\r\nx-amz-request-id: tx000009f555e88be0fdd94-0068c17f37-173861bf6-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":133840,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2880x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d204cfc6e81ae9a03f7b2fb229231fb1","sha1":"7d627a9a88f2643bc6e946f77c8354689b6ae1d5","sha256":"63eb1456052f39d3f98a2e34b53293a740438e6974ac4ee5e24b88d656283fca","sha512":"78c9ffcaf529263e93031a54b3e43078afdb88bd87e9fcebddf47689c2f9cc6877798d9af2151470828ced80a70e187ffa5f2ff78d194ddf2142bd0d67f8c9fe","ssdeep":"3072:U/bgxN7zgnnITc1HmE12OG2D7UbWSGbyYnZo5t7qZBsem:UgxNvgnnpmA2OG4lVbyWZc7WGem","tlshash":"12d3127aaec7576a1dec10f0577836cde36a670bd9a95192213324fc4c7b0a70b684b2","first_seen":"2025-09-11T21:42:03.638508Z","last_seen":"2025-11-10T22:08:34.070283Z","times_seen":9,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":158,"dns":0,"connect":0,"send":0,"wait":31,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/ezugi.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/ezugi.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=p1GfThGB3wR6HLAP; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-97\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":151,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d350aa779602ab8f010dd9cf9508532","sha1":"6f2ef55fce721313446c54e72615976e87e2866b","sha256":"930e4a508eb90ec69cf46bb8e43bfe406a45302943260b101b533e0231fc7f66","sha512":"e60d3c6405734d38b979b617d4f5fe71c69c5f5d0227ae84ee8431fe8802ddbc9c3d7e8acc2e1ac0e9140533337d6e23e2f6449bfbe33c673e67fdd2a48d0521","ssdeep":"","tlshash":"f8c02b3690dc8c0ec310c120512e33c713f661d911890266f4c02b02f0207fb78c97bc","first_seen":"2024-05-07T05:57:01Z","last_seen":"2026-04-15T02:03:05.91567Z","times_seen":68,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/D79Xm9UW.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/D79Xm9UW.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=82yFQzxAXCtyCkhF; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NiYCmemGlDP0NtpD; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-length: 2835\r\nddg-cache-status: MISS,MISS\r\netag: W/\"68f899fd-1896\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":6294,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6293)","md5":"361c2887a64506744d7b789a29ffca7d","sha1":"f94e310d5af438f3dc8bc1302895d88487ce107c","sha256":"f2fe248d342fdc83e05b1ecfd76787c2ca90b25a4bf32d3f275452fd1ae2f194","sha512":"10c1ee235b7e1214cbe3a2ab39d483b6b00b3a4560005c806b70d7ec9951af42c49116b8882d03be459b163330c300b44fce024215dc6d3258de50af809d672e","ssdeep":"192:6pazyEaxrcxshi0pM3bumtmRNwDA8T4uC3/bR5AmMbgj9ak9rLX:2azyEaZcxshi0+SPQDvk/F5rMS9aeP","tlshash":"4ad11bccb4a67021b37b4ae5d0b78107763829a1348bd4e0e01eded73e15a62a792d8d","first_seen":"2025-10-23T21:23:43.483867Z","last_seen":"2025-10-23T21:23:43.483867Z","times_seen":1,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/flags/?v=2\u0026config=true","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"13.216.81.40","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 15 Dec 2024 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:07:A5:B7:4A:00:EA:45:09:50:EF:4B:44:63:83:38:E2:97:F8:13","sha256":"6D:1D:1C:48:82:61:EB:EF:E4:D8:57:9A:EA:F6:ED:0A:07:BB:6C:17:71:6F:A3:F1:88:57:DC:E3:A4:E8:44:96"}}},"request":{"raw":"OPTIONS /flags/?v=2\u0026config=true HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.gwcz87x.life/\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\naccess-control-allow-credentials: true\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: GET,POST,OPTIONS,HEAD\r\naccess-control-allow-headers: content-type\r\nx-envoy-upstream-service-time: 0\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T15:05:58.256156Z","times_seen":17565140,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/eurostile-black.CuyT6JKl.woff","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/eurostile-black.CuyT6JKl.woff HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=Ns3gTHgj9bKaSgBE; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=3GEQ9p5cNlWL2fLR; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: font/woff\r\ncontent-length: 95720\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: \"68f899fd-175e8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":95720,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 95720, version 1.0","md5":"ca7fd9425338588d941bfb331792ecce","sha1":"e4a8a3b0425a3323f2c3e8b4059a1429da8297ce","sha256":"cbeec4e4387480fcc4cf1bb7f9bd5736f9b6425ac6d7450770e3bb565eb4675f","sha512":"8e1fc6495d11f4c2eafaa8fd62112e0517c2f5046b9777b8fa0f771c481f72a0f73db15a7f6797ed1523d050886f9fd7635adbaac124fee24cdaa8b86e935eec","ssdeep":"1536:jj302uG3KgcImTEjOwWoiGRHIRRBCUo7zO102Y0OBGYQACp2ZPC3ZZ6p8rR:/EkKTImyWoiGRYRBVoR2Y9BCp2BUZ6pE","tlshash":"d99312eec0fcce88fd9d02ce105d6a35ae49a0fcb2c3598b82f154d892dd17e895506d","first_seen":"2024-12-10T17:19:34.260995Z","last_seen":"2026-04-25T06:32:47.440262Z","times_seen":55,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":85,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Index.DjeSHR9Z.css","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/Index.DjeSHR9Z.css HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=Ns3gTHgj9bKaSgBE; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=pfcVhWdi6p8zTlEK; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-13e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":318,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (317)","md5":"47f876f6777238b8fef6cab0e88a190e","sha1":"12350007296b859405aa99e5085540122bd66179","sha256":"752176faf7991d0fce63e67af84fa4b45ae51d72c966b866abf842e2a8783856","sha512":"7e02bc91f6c2b8b6a2bbeec518678e9858fe7d4b84db9a4105be070201876c68f42a3c25130faaff9cff2e29a18052db4afbcaa044eed268a685f286c89ea06b","ssdeep":"","tlshash":"e9e07d31388c509dc8ebe2697619495c0e1ef2abef3f49190875a0651cd7d44233a444","first_seen":"2025-08-19T01:32:32.305939Z","last_seen":"2026-03-01T21:47:53.436256Z","times_seen":31,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_ipx/f_webp,avif\u0026densities_1,2,3/img/tournaments/cup-desktop.png","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_ipx/f_webp,avif\u0026densities_1,2,3/img/tournaments/cup-desktop.png HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=eBAasD6kbyVXouU5; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=dAiaqkLgt738xP1T; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ndate: Thu, 23 Oct 2025 21:22:25 GMT\r\ncontent-type: image/webp\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests;, default-src 'none'\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\ncache-control: max-age=60, public, s-maxage=60\r\netag: \"186b4-7apePpsuTa6OkOlxkYYZTp5dD3I\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100020,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4fda67fb1f219b51734a424ee8bfed2b","sha1":"edaa5e3e9b2e4dae8e90e9719186194e9e5d0f72","sha256":"b00593999680b32a47ec2d142bd1a9e45238f392351c56353ea904d1beb60cc5","sha512":"09cae252dc84b051ecf26be9e8019241a49bf4c81cf8e5f6f86a6c9b3fda99bc9bf85701652a2eef91a0df56c5b88c4d1ae2aed38d34ce2dbedaf9c1f28e7a14","ssdeep":"1536:2iUNqhSFbeDH84FedlkvMLatgbDMYdeeY8oDaeOlqp6x13kzLxRu8WoFKQBRmY:CEhSYfFedyELlDM6JvRxdkzLxzBgY","tlshash":"98a3125ad5e2f613e648ceb6e23cd33c57f63e8b3a1976062db1214ae5c152c063943e","first_seen":"2025-08-09T06:39:59.110732Z","last_seen":"2026-04-06T22:48:49.663318Z","times_seen":48,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/84b705dfbd5a8cf21e3ac794e96cc7549a8e8e1a.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/84b705dfbd5a8cf21e3ac794e96cc7549a8e8e1a.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 29047\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1851FB8DAF06D1BC\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 2773\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fuos54Yc1LBYtahGg3FojWvuYa%2FLr2nolYZWz6I%2BQ9LU1zbB6NPF3bRolZPqPSQyQ%2F22xAQRQLtOP7GY6DN9MKoJAApKhcSPA%2BzddycP\"}]}\r\nCF-RAY: 99343e1519846656-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29047,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"72eac6176c1bb11388a5e609856efc7b","sha1":"56e97c552ae949be8679b8587d9539cef049f93f","sha256":"81b2acd9bbfb9f3127342050e4c10e3aa03cb227fd4f2c45e043fdb3bfeaf909","sha512":"71dfebabc3ebe64a1d7f64d189ee37b036a02509e151b5ecb3d9276729db1524e292c4939951a965a4614e441cc1011bd11c82e30b699f10de18abfd4524c3a3","ssdeep":"768:uhFXNLlIdATTUtYK5Nf9Voy/5SGFs4mMxSX:UF9LlIGTUX57Vl/EYigi","tlshash":"69d2e12966e9005ebe55ead0805e6297717718c80709b6c737f8da7c9704e6840ffef8","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-07-12T17:41:43.663287Z","times_seen":67,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":159,"dns":0,"connect":59,"send":0,"wait":87,"receive":1,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/4aXjxUSr0xApdu9RQKawYIQdWBDywFZvdvzAY5rG.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/4aXjxUSr0xApdu9RQKawYIQdWBDywFZvdvzAY5rG.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/webp\r\nContent-Length: 90310\r\nConnection: keep-alive\r\nlast-modified: Tue, 08 Apr 2025 10:07:29 GMT\r\nx-rgw-object-type: Normal\r\netag: \"fca035075eba496e0083ea0c08e2fcfc\"\r\nx-amz-request-id: tx000001994005420f3b1d0-006867c79b-162d5ff72-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90310,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fca035075eba496e0083ea0c08e2fcfc","sha1":"a26a10cf916f8055e48fde5e8ec4d20618ed7ae5","sha256":"5113740d240d322b2adad91042190fae6801e53f236a54f87c7f3ddd5f6de155","sha512":"c7e2020d3f95c3257161eccc926c0fd2cc6abac7f3794c161c41d45c3d71cb5b189db524a9a5521e0e4bcbc625124624186df9e7c8e99b8ff8639e621c1c6525","ssdeep":"1536:+Tvb49+fTx8BMpjDLFOHwyYOPKfKCfobjO88BYfSbCfluldY7CUZtdQ0m2OqlN:+Tvby+fl8O1qmOPcKIEO8fp4zUZXf/Og","tlshash":"3a9302f2db0e20d09354dab3a6762244342b5ca6e7f36ee1211a86c1d75fe84370ae13","first_seen":"2025-08-09T06:39:59.108778Z","last_seen":"2025-11-28T02:25:21.188333Z","times_seen":22,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/collect?r=3515821","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"OPTIONS /api/collect?r=3515821 HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: region\r\nReferer: https://www.gwcz87x.life/\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=x6TmylVVDPzb0pIn; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg1_=8m3221vCIWFuiyEOno3q; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 1ffe417b-566d-41a8-baaa-5011549255d0\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T15:05:58.256156Z","times_seen":17565140,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/BQKeWjB0.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/BQKeWjB0.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/l9CMu1bs.js\r\nCookie: __ddg8_=3RwUFnpbxrXG4Xdr; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=o6zc8D86FjNOKO48; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-687\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 930\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1671,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1670)","md5":"36d4ae75de9e6c6555488a56b8737368","sha1":"1fb98c9e83211e9e57ab8300816f5e0adb20a13e","sha256":"38bb728c63b1f45cc5a4b46154c5e6ea75a31b125e55f7ad9bc439ba6d804130","sha512":"8ae4e2b8bda0128d90ddac74a307bd183969b216709e618789e8b1327d635c83b6026e740282737da8cd603c78ee4233a3887d0ac96cd3497600942a1086ca02","ssdeep":"","tlshash":"003122c9f298e4b7d0a7d7e88472902076e875fb3f98dad4824099715623096ba4ead0","first_seen":"2025-10-23T21:23:43.560445Z","last_seen":"2025-10-23T21:23:43.560445Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/mirror","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /api/mirror HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=HPhilg0tS0mB5u9X; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg1_=lhZLgU6frJJnue1x4VwA; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 30414591-956c-48d2-a7cb-39a93acac8b4\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":538,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6c9de6b174a81d98855b9b3ef598b1cc","sha1":"550e3d0b6c34a9006a107dc915a7790400d0549c","sha256":"08c4aebd4efab140f96e5586045838792813ad4dbec2f80cf698ab7ba5e8b6ea","sha512":"64633f84af8088282bc1823c34d4b89ef6f71f4fba66ca382ad8669d630d649b75b0d9868771526e271be7e42717b7dc3187a1424a62262b29127b8aebb2d65a","ssdeep":"","tlshash":"02f059526eb69e2c12c653c60d18bcaa96dd910f9841acb54dc49f4411f83f4613b026","first_seen":"2025-10-23T21:23:43.568145Z","last_seen":"2025-10-23T21:23:43.568145Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/CC-JJjPk.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/CC-JJjPk.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/Razus-0y.js\r\nCookie: __ddg8_=81nnFKjWWhoC5TuE; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=zVZRSUpNS03kYFgZ; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-length: 76306\r\nddg-cache-status: HIT,MISS\r\netag: \"68f899fd-38767\"\r\nage: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":231271,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (61957)","md5":"28faa779be2eb7b8820b07d8364f1eea","sha1":"ee2d07668314c256c7c26c3531e2fe82ed511087","sha256":"9eefadf32e1a98480d9da65562ac10e5e51d51c52ee48180ce3db466a5e98c98","sha512":"d7e69e010e34f5575f658508b4cb97b9ebcc429045f3bd95211eb29a222a519a914b059ab8bb64cd800977d05770fb0fa2f1ca1845fe18f86cd920aac99c81d4","ssdeep":"1536:olSpUnKbSKnQuJnXHrxAOwTlWupr+iLxa1EzQ3WIO8zrSouwRp02DnkS459rS9pD:W4UnSQWuh+WHzIutcjGmf3xKs","tlshash":"50346caef38991fde11b8bd49047741431652ffea281c85282fc5d04272a8fc57ede6a","first_seen":"2025-10-23T21:23:43.016832Z","last_seen":"2025-10-23T21:23:43.016832Z","times_seen":1,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/cdee9014e4d2f1811fca73b151d093dddab267bd.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/cdee9014e4d2f1811fca73b151d093dddab267bd.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 33368\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1850C6C2D9CEC350\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 2771\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bn%2BRu%2FdBX7q2VcQuil7edxm6RWOOIhoinAyAiP919LwJWbBJp8zMalQhFqZOT%2BweZll7GIZv14ynR6kFeoCU3eOiojwmhewCeihC4g%3D%3D\"}]}\r\nCF-RAY: 99335947c93df5cf-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33368,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"556b860eb17cfa6f8fdc338ece02a958","sha1":"791d2e9a29244c70eba438000f50008eae113932","sha256":"3368734f4cf53acbd15d3680efe367fd3961f0db6c833b11e42647ab13ad2b5b","sha512":"117c294931b7f1ea10fa14125979e75d3dd7cb12703384a92dc486a501369cce6283341b4f707d0098db48deb700c5205d93b0d833ea6dcc969bcd0f3127c7d0","ssdeep":"768:/6KG8tImiBsY+enLcpalasRXNJD5QINWGGcrZ6NMLqolU3:yKG8t+BsXpaYsxlQ+3Xg","tlshash":"e8e2f108acc87f54536785a81210e58f9f29d8ccb5e7968b8b8f1c204879c586c3ebde","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-03-01T21:47:53.332676Z","times_seen":51,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":204,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/Moc2h8VORWnranftbRqSbrUxd6utDoJtsYwUrg3y.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/Moc2h8VORWnranftbRqSbrUxd6utDoJtsYwUrg3y.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/webp\r\nContent-Length: 150782\r\nConnection: keep-alive\r\nlast-modified: Wed, 17 Sep 2025 06:05:56 GMT\r\nx-rgw-object-type: Normal\r\netag: \"56e52aa195168396d69114c5f05ababd\"\r\nx-amz-request-id: tx00000986ec49dbea41792-0068ca4fc6-173b8ac44-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":150782,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2880x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"56e52aa195168396d69114c5f05ababd","sha1":"e549563512f47d36837e5646a44b35fd38a42079","sha256":"7d993d7db0e559338ca5e4072a43014b3f101d50c9d47cfe5a0eeff4f87b8afe","sha512":"aec4def5e45a608df5d6acc70508d9079cfd961bca73aceb5f961237c851ccf1b636941ce6fc1790b7f698cc68d2687c47b07bc8e04ec7f6c1b69e2d4dae36d5","ssdeep":"3072:GRxZj27LsAzRsfNiDTvegksuNBHHq7ML2Y/X6YRzYVgtYhcj1UY2xGnwh86kY3tS:8ZjcLHzkkDTUiUbKYdYVgtcmUPGq8zqk","tlshash":"f5e31260c9f530e0c9e468e9094bdbc2dc4b3c4358fb9d655d87aa5389361a1ce3ba4f","first_seen":"2025-10-04T05:11:03.577712Z","last_seen":"2026-03-01T21:47:53.370029Z","times_seen":24,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":133,"dns":0,"connect":0,"send":0,"wait":31,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/images/files.svg","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /v/images/files.svg HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:26 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 11762\r\nLast-Modified: Mon, 29 Sep 2025 21:14:19 GMT\r\nConnection: keep-alive\r\nETag: \"68daf6ab-2df2\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11762,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a05b040566ca5377535a07f94adb66ac","sha1":"fd3d544bf14f3c9ad33f6c9d17a861371d7b684d","sha256":"e85418c502fc12e921c30c21ab3c5ab58dd063e19b73fa231bd0d7bec2a605a7","sha512":"346d1a3979f32959851081a764e87950a602560638e9f87594569c395b6347844338faebaf8016982e269134978867497ad4152e6e4cd86ad681e61f09f21730","ssdeep":"192:y3IN8A3nLn/NTLpsCPeweE/c+okq+eRuDUfMYzLnoP+VhwOwyHN2ELrh:wIN8uLFUOom4zLnoPqhwVQhXh","tlshash":"0b321bb23efe2a843ef19e75852073f59cf1bd152485d22688da7202313364c8e9e5f9","first_seen":"2023-11-18T23:23:23Z","last_seen":"2026-07-26T15:38:30.846463Z","times_seen":1792,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":92,"dns":1,"connect":33,"send":0,"wait":32,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/agcVug81.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/agcVug81.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/Razus-0y.js\r\nCookie: __ddg8_=x0UitSVpR8Zi2AfN; __ddg10_=1761254546; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=I0cs5C8eU390UEF3; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-4a4\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1188,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (706)","md5":"d864bed01126ed1f2174822591f40a71","sha1":"f3790e5db702bd43253daf9deb7ff28d023cfe06","sha256":"b601919898a0d5ee701542a271757d8d676227eac20cb0afa1ef29ccdc044fbf","sha512":"055126dafe925327425a6287ffee8aee4dece11e1e39d61e96ccc1d64d9bd7a162dcd86ca97564e7227a7c7ed74004bef8e7119b3fa239882243c45749e60abb","ssdeep":"","tlshash":"5921238e1694cff8624c9df84c76382452e04cfeb6fd98d7c14d196a1375029d46a357","first_seen":"2025-10-23T21:23:43.615222Z","last_seen":"2025-10-23T21:23:43.615222Z","times_seen":1,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/SlotsListPage.BBOrWDWR.css","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/SlotsListPage.BBOrWDWR.css HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=x0UitSVpR8Zi2AfN; __ddg10_=1761254546; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=MndNVitF3HERC8nW; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-24e1\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9441,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9440)","md5":"5b41b46063a6e24f6d5f7a95b7e0ffe5","sha1":"e3bb0e0afd71e5178d60b933c69ecf22fbd95d74","sha256":"282268160e82779059785f9a7e70fe221fc02729fae126fd89d8c3e605625585","sha512":"2005c7eecbaa9a30a55c09393452e2090fa4c32bac98028127921c40ce8feb3be49fd3aaf0b0c1ad185e68e28b71a9b92a78aa78182a1f7a10754df50352e708","ssdeep":"192:qF75HTpr8y5ROBPVU2bTMhVSrNDjDC9D6WDqtzaL7lBRg8:qfHqyJDgfCxLqgz+8","tlshash":"70125121b9df2e1c3137d255e181af8e3028e723c0160beeb59a9515c987c9b6fb2099","first_seen":"2025-10-04T05:11:03.554486Z","last_seen":"2025-11-28T02:25:21.151669Z","times_seen":15,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/bZ-Z2_Lf.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:28.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/bZ-Z2_Lf.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/QPlbqdGQ.js\r\nCookie: __ddg8_=y5sHjN5M9S7JNuTJ; __ddg10_=1761254547; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=WUUF2q7rTBs9FWuW; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg10_=1761254548; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-4eb\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1259,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1258)","md5":"45e15f8f2007ce8f9ed5063fe94ccced","sha1":"fc913dc63f28fbb3eda1fa536ccb00752b7a9761","sha256":"096c6ef072db595fd16dd83665e9476402d90743702a0681ad81a7ced863365d","sha512":"1a3beb2bd0f6eb09aad5ff5add50bd8a72f7b21ee9c38bae1d0311d2ab657487f14b70ec25509e373aa062843307e9878d446055b1a295ae5fde08dd3215658f","ssdeep":"","tlshash":"2b2162aea434003f8e9d3419c9483465cf454f19f0ff884ab83d4d5a63001c2ec7ce28","first_seen":"2025-10-23T21:23:43.644576Z","last_seen":"2025-10-23T21:23:43.644576Z","times_seen":1,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/SlotsPlay.A8MLGHbX.css","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:28.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/SlotsPlay.A8MLGHbX.css HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=y5sHjN5M9S7JNuTJ; __ddg10_=1761254547; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=gZzXlWf0aqCRTdgh; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg10_=1761254548; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-104b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4171,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4170)","md5":"e9c144909f9c848fabac66c480b74de5","sha1":"59a94e86a194389b0daf1fe3528a6962f19f033e","sha256":"a770078361455668d071d38dc60194d42060d403fbeab7717d76519b94a5f4fe","sha512":"af78ada24ba8eb5ca29eaf333ae4d54df86a109c605510e0b099ca9f213a51632d960cfb413354cad3741703dba5c3dae1d2c44446a61c0645853c5dc3d4c1ba","ssdeep":"48:2oMNFoD7+Bk7f7+YTEVuVMfDYFfqEiLbWNEi9Fif9Q84iyVu6HZDNBkSh:2Jbm7Ok7f7FKclePD21nkSh","tlshash":"e081c0657ecf443cb037d06a1a624e6c9b29d90b831f17ad6b109134cacb64b6ff4199","first_seen":"2025-10-20T13:01:38.501029Z","last_seen":"2025-11-10T22:08:34.020638Z","times_seen":4,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/B7EGnscI.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:28.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/B7EGnscI.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/Razus-0y.js\r\nCookie: __ddg8_=y5sHjN5M9S7JNuTJ; __ddg10_=1761254547; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Cuxp2Go9T1SJwVQQ; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg10_=1761254548; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-1d8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":472,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (471)","md5":"f7a4ee68aa9a8cde229584e30d2bf43b","sha1":"195dc468f5a80fd31b6da530d947863ca5581631","sha256":"f2ed174ddd8c31ec680b064d89a26c34168888d10f901f184dd569ccbacc1d38","sha512":"9ce92da01c7862675b4c71fb72fef58fe59fad6d3a0dda73f3383f574d28b6c54432111a78f892152c002f5cea2d5b4a986752f4a66474ac17dce158414342e2","ssdeep":"","tlshash":"fcf0201bd46181688014dcf4d038e0b0627754d717ced370c0ce0bb06320034e1a67bb","first_seen":"2025-10-23T21:23:43.655607Z","last_seen":"2025-10-23T21:23:43.655607Z","times_seen":1,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DZcUfp38.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:28.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/DZcUfp38.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/Razus-0y.js\r\nCookie: __ddg8_=jj8FslBpDVMWXGkd; __ddg10_=1761254548; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ukkFd1AId5AFRYae; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg10_=1761254548; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-1f3e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":7998,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (7898)","md5":"c51e87849c20754df562b45e01b56245","sha1":"f2f0a0db376a635d5f03ca9849af12d11563f208","sha256":"67bcdf2479d4e04ee9ac5203aac7eb67599cee3d12a31c1431b396a249308c4c","sha512":"9d8c9e348c8fa0e371f6c70c3e4cff3a1ad2e089948584bc537403d090f3d48a3171e66f223681ac5cb2a2897cd3bc40659a411ffa55154d5a526d9b4c8a754c","ssdeep":"192:pEvaTF8zRB/x9G27KeY7kd1VCcqHRz8JV41+HoganNQR0VZFn2p:Qau79nYmVCPz8Jwo","tlshash":"98f1b7e5d952983cb8b719e018eeb10834292fba92c1cc5765f88c24de44df99a1e79c","first_seen":"2025-10-23T21:23:43.665227Z","last_seen":"2025-10-23T21:23:43.665227Z","times_seen":1,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DlAUqK2U.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/DlAUqK2U.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/l9CMu1bs.js\r\nCookie: __ddg8_=3RwUFnpbxrXG4Xdr; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=V7x1YtTdppB9rIwa; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nddg-cache-status: HIT,MISS\r\netag: W/\"68f899fd-5b\"\r\nage: 2\r\ncontent-length: 102\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-07-27T14:20:46.915264Z","times_seen":24751,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/jSQlKdbM.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/jSQlKdbM.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/Razus-0y.js\r\nCookie: __ddg8_=x0UitSVpR8Zi2AfN; __ddg10_=1761254546; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=8bFzcCjSgB0nLT3j; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-443\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1091,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (771)","md5":"c8dd077c592f5f20f5063cb16196340b","sha1":"5b346fe8c432853edf1a6291cd7cf260780df134","sha256":"239c923e223189feeab6b0ff5066fccedcb6ba682f9401d006214967d5a4adcb","sha512":"a3121e894609cbe47496761ff4756dd4144361de2aa23e86e37a577eef769d4a0d3193de72a00748be051a86bcd9101d7a00c701368ebe17c565593446cded2c","ssdeep":"","tlshash":"5011c09f5494c8bc914c5ef8dd23742501f42deb9bec54c2c28d0d7a537501ec0aa757","first_seen":"2025-10-23T21:23:43.68545Z","last_seen":"2025-10-23T21:23:43.68545Z","times_seen":1,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Razus-0y.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/Razus-0y.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=cq9xLBE7xxG1EcLE; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FYKilhixwfVnd5Dy; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nddg-cache-status: HIT,MISS\r\netag: W/\"68f899fd-775ee\"\r\nage: 2\r\ncontent-length: 171291\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":488942,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (47596)","md5":"a41f0a93536181ab28b02f37731757eb","sha1":"60dd82451fa91f9c784158226779cfdd6c94d1d0","sha256":"ab433d16063a4b34933b2a525fbcfd0cb5b4a60f7c3ff04cfc49c80567caa782","sha512":"286501ac2ce88c4e6ad719f3674f51a085ece9f6411a8aa446994a2f04397586765e8dab308923b04e594ce0238f4317e49bbf8daefc7aa1065e4684b65b996b","ssdeep":"6144:fnSzjJLQT2m905wx1DQTXdFSW3bVSzA6MnIgqaTLwbvvosSDh6qJJ8LHIF9y:PWjpQ39ewx1cFSubV4mIgqaPsG8qJJ6","tlshash":"51a45bd97196b02253f619f4907b0106f3392a58384ec4e4f16daeea3d7680a91b7f7c","first_seen":"2025-10-23T21:23:43.118234Z","last_seen":"2025-10-23T21:23:43.118234Z","times_seen":1,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/favicon-16x16.png","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=2WPsWoXnUqdW43Qo; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=L8ukFAzL8EPIUNmB; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 1103\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: \"68f899fd-44f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1103,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"11f24fdbf91f702bda779fc31cda72b6","sha1":"675c7e4a5d8443b041056cf934a6e2f652914a62","sha256":"22680e0318483689dda6c739ddcada0864dc530300444247c87d8233b347b858","sha512":"56998c6ce69ca75e2c00756450a2c33ed491a5be0499d5003eb3638d643efb5d395705a986df5301f74ffc9c0f10c707b9e7837a491ec7afa55f349240d2087e","ssdeep":"","tlshash":"de1146d1e121e051c26614f169222480ff67407bfeff8b1afd22a4145c5a6b997f76c1","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-06-26T20:23:29.961595Z","times_seen":155,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/builds/meta/e1027608-1f22-4fd7-9062-9bd2e5686dde.json","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/builds/meta/e1027608-1f22-4fd7-9062-9bd2e5686dde.json HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.gwcz87x.life/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=QqdsWoFP84d8QVlo; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=bvVVXGPbvF62VgE8; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: application/json\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-8b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":139,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"84075e8f3de78ea1cb26ad8447589e86","sha1":"3c3a229d626da8e1d7cfaeeb3e1b589b20de21d4","sha256":"cae18924e15b645779fa4f3eb767086bdbed8f949a24e374783418ce6e2eeecb","sha512":"b1c996b41700ebfad6e4c4ec6473030504f2c7034d97b61e880aae1898ecbfb46d74d92580025a9da952b0a37e2373e87662539766434807f26e2ce86c3080ef","ssdeep":"","tlshash":"e9c02b36674801e3bc64493cc01c20b2cadb43a324bc082a82580d2fc0298dc280c013","first_seen":"2025-10-23T21:23:43.709173Z","last_seen":"2025-10-23T21:23:43.709173Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/api/v2/banners/main","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"OPTIONS /api/api/v2/banners/main HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://www.gwcz87x.life/\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=lxJd6e4a5kITOTOl; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg1_=s2N0muT0mYBVJj5vvfE6; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: f9cdcf1a-c599-4bbf-acc8-ce4303c66c69\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T15:05:58.256156Z","times_seen":17565140,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/0b6e2e38d76c4a40bf6ab7235f92c5e7.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/PragmaticPlay/0b6e2e38d76c4a40bf6ab7235f92c5e7.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 21309\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"a0243053186e9dc6b7ceb3f5ae10058b\"\r\nlast-modified: Mon, 06 Jan 2025 19:17:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18502DF1A8F83A1F\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 767\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kZjbClSNbuCc1FKNTC4hwIDgXrs1f3KUWuACPJf1xuuwpgv2VY%2B3pekvf%2BShAn7aZLJomrHTJVrJcsyFYzrslWUFyqfR%2FlQKl1gFJ3iq\"}]}\r\nCF-RAY: 99332f8188c8f4cb-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21309,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"a0243053186e9dc6b7ceb3f5ae10058b","sha1":"b71e035aae00b689245f0966c3d9a3a7b52892d7","sha256":"458e62a07eded322f3a1f254fdfba3f49e9dba0f3148f47da7844697c11801ac","sha512":"54fa56177a5a8f0503c6908bb91fef479aea4611ff61b6f614e6b941eca458b49b5c0071b5f82ae6ef4f55be4b15554ebb9a36fc17026b4504d4824c017e6678","ssdeep":"384:wWvwb3jEKZdinOjA4JKcRA1lNSpNEalUMfTHrt/buMkgIeGfe+:wWYbTEm0Ok4J/G1lN6EayEHrt/C+3L+","tlshash":"84a2d03a9ef5c6391a19b6a0308131892f0986b3f7c9752bda296543ee3d91784e6488","first_seen":"2025-03-21T05:40:09.025565Z","last_seen":"2026-03-01T21:47:53.218484Z","times_seen":41,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":207,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/ogk41E93.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/ogk41E93.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/Razus-0y.js\r\nCookie: __ddg8_=x0UitSVpR8Zi2AfN; __ddg10_=1761254546; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=5M1lB45Tr0Ir3KMp; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-414\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1044,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (686)","md5":"9cf2ea15d679c5841aae226b1c497767","sha1":"eda32a93183507bb5603fc75d1fae0b99e6a8a43","sha256":"f50041e7d52b4758cdddb60c8f5fc46407ad44cc8593deff12976fa0d5e645ff","sha512":"897ea42a3bb4d5a70fc3c1ca4279ef9e06eec5db63b7ab9ceda378ec43d6fd0bea1fa643545e10c0dc42a66f110ab4abd16f35f247529f8f74a2bc7c28f47faf","ssdeep":"","tlshash":"8d11219e19c0cefda10c9efcae32742415d40cf633ec90d3c21c295a4239129f566397","first_seen":"2025-10-23T21:23:43.725371Z","last_seen":"2025-10-23T21:23:43.725371Z","times_seen":1,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.gwcz87x.life%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1065107201.1761254542\u0026dt=GET-X\u0026auid=623911282.1761254542\u0026navt=n\u0026npa=1\u0026gtm=45He5am0v9186219929za200zd9186219929xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948813~115480709~115616985~115938466~115938469~116210085~116210087\u0026tft=1761254542354\u0026tfd=2268\u0026apve=1\u0026apvf=f","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:40 GMT","end":"Mon, 15 Dec 2025 08:42:39 GMT"},"fingerprint":{"sha1":"99:C6:4E:8E:B8:5B:D1:99:2A:8E:B6:F5:1D:F0:C9:9F:D1:98:60:99","sha256":"5E:61:10:69:80:4E:43:5E:5C:BC:64:28:29:74:91:F6:DC:3B:42:28:2D:71:3C:A4:FA:4E:A8:88:A1:46:E6:39"}}},"request":{"raw":"POST /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.gwcz87x.life%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1065107201.1761254542\u0026dt=GET-X\u0026auid=623911282.1761254542\u0026navt=n\u0026npa=1\u0026gtm=45He5am0v9186219929za200zd9186219929xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948813~115480709~115616985~115938466~115938469~116210085~116210087\u0026tft=1761254542354\u0026tfd=2268\u0026apve=1\u0026apvf=f HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.gwcz87x.life/\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T15:05:58.256156Z","times_seen":17565140,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":153,"dns":0,"connect":21,"send":0,"wait":31,"receive":1,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/CjIjlGq-.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/CjIjlGq-.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/CC-JJjPk.js\r\nCookie: __ddg8_=kXuItyf5t0D6HwUo; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ZKh9emSp78sYPPcW; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-length: 12541\r\nddg-cache-status: MISS,MISS\r\netag: W/\"68f899fd-9ce4\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40164,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"8536f2f542c30c3b37aa68fa9d57f5cb","sha1":"4679e0eb2b374266ccf64bfc73ac98dad5143a1d","sha256":"84a0b743a7ef37e6cd2a2db660b4b5899c3fecce9d1f28502709614fc9d191fa","sha512":"126dd430ac683507fae1c2a1e11c5ff94a9015441798342ca77791fe29709b30c33f8b30ff1b10b1f08b51fac27d016fed4b2f8e724afb82dd8b57c2fbc7fbfd","ssdeep":"768:kC43aMGeQtDCPB/HyzE0qct7yxP2C7dSlSxkPut06BcftOashQWEhQEq/iiB8faZ:760xiywcV64IX","tlshash":"e303f8c8b2a0506583e2a1a390750203f33999153409855cbb2ceefbad7eeda7177f75","first_seen":"2025-08-19T01:32:32.322521Z","last_seen":"2026-04-26T08:04:42.226428Z","times_seen":67,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":96,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/games/casino/best","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"OPTIONS /api/games/casino/best HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://www.gwcz87x.life/\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=RqdueUqUERrtZu6g; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg1_=9mq3QiZZNWiV9XD1dM0N; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: fa331f31-b4a8-4b22-b3c8-ba5d3943b52a\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T15:05:58.256156Z","times_seen":17565140,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/5cc985252d9ed98c062178805efdb16b/VoltEnt/d8f5b4a175bc4ab2ae8867fe7c5a6d1a.jpg","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/5cc985252d9ed98c062178805efdb16b/VoltEnt/d8f5b4a175bc4ab2ae8867fe7c5a6d1a.jpg HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 25000\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"5040eb3d746275f1a0980aca02baee08\"\r\nlast-modified: Thu, 16 Oct 2025 14:34:24 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 186F39F22A454CED\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 2536\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2BHFm2ylvjs16WGvgOLkmpozKfPlN48eVDJqJSRj1E2zDCsLwVlPsVmPT3tE0CIC37ulTxJVvvX8kZ1HEi2XSb0A5nCdCHyUh3nGsP6N\"}]}\r\nCF-RAY: 99339d14cd7dbe6e-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25000,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 287x193, components 3","md5":"5040eb3d746275f1a0980aca02baee08","sha1":"62591f556041639821889bdded4576c7ad9d3c17","sha256":"b320c1fdf559fe4b9a95dfb5a958df99a5eda529a7966af407298aeb310bb568","sha512":"3c625bee586e9949a089ad108bd44d03ff42a2f36c4782adcbfd35e2f7a2a827308e384e5b323f42b443a2a6633858111c45d81f3853480a6ecbe0b959a3e868","ssdeep":"384:6UMRV6VIZ7RN5ELhYUIcyXtVT+wZaWH8IjsgCqE4cBKMtHuk3CeL4HvTv/MM:lMRkVIzPELhv+VqeaWTjUqE4UTtOF5vV","tlshash":"2ab2f1d28c94b31e1d046f60b0115ec4a6d9ac82161abf9d9da9cdb3cc156d73d2ef20","first_seen":"2025-10-20T13:01:38.550457Z","last_seen":"2025-10-23T21:23:43.737368Z","times_seen":2,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":219,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dr=www.gwcz87x.life\u0026dl=https%3A%2F%2Fwww.gwcz87x.life%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1405773222.1761254544\u0026dt=GET-X\u0026auid=623911282.1761254542\u0026navt=n\u0026npa=1\u0026gtm=45He5am1h2v9186219929za200zd9186219929xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480709~115734859~115734861~115938465~115938469\u0026tft=1761254543532\u0026tfd=1479\u0026apve=1\u0026apvf=f\u0026img=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"10:90:B3:3F:30:77:D6:5D:F3:F1:F4:8D:D1:61:AA:F5:9C:D2:09:E6","sha256":"AC:0E:79:60:FD:CB:6E:20:77:C2:D3:75:94:E3:99:85:B9:AA:9B:EE:67:43:40:78:7F:17:FF:3F:6A:BA:05:CF"}}},"request":{"raw":"GET /ccm/collect?frm=0\u0026en=page_view\u0026dr=www.gwcz87x.life\u0026dl=https%3A%2F%2Fwww.gwcz87x.life%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1405773222.1761254544\u0026dt=GET-X\u0026auid=623911282.1761254542\u0026navt=n\u0026npa=1\u0026gtm=45He5am1h2v9186219929za200zd9186219929xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480709~115734859~115734861~115938465~115938469\u0026tft=1761254543532\u0026tfd=1479\u0026apve=1\u0026apvf=f\u0026img=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Thu, 23 Oct 2025 21:22:25 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T15:05:58.256156Z","times_seen":17565140,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/images/gx_site_logo.png?1701674734622167","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /images/gx_site_logo.png?1701674734622167 HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 4133\r\nConnection: keep-alive\r\nLast-Modified: Mon, 29 Sep 2025 21:14:19 GMT\r\nX-Cache: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4133,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced","md5":"3dbd3ef73f701c5b6086e3b202b29c4d","sha1":"f242edce2274435695ee1d66887acfe6c65b2c86","sha256":"e0c6e4c02626e5c7bc7c962e57b88c9dee71c2d54b4478940c16d4f26667e69c","sha512":"0119ccb9d9124083b19a4c7f97845c23f0587b85f2d193c849fe7b8a6ef1e3a9d3ef34ea4ccda6a31aa894014ddf4308874afc69a1a75be8d935bb98d2ab53c6","ssdeep":"96:TjjcoQqosJxFjeAcv1TGJirAUmGT+mPxOB:TjjkyH+AUbmw+mPM","tlshash":"42815dfe3e3273d384609b024b7d5400547b6ccfba89955e85e7c0ab3d44a8846cf296","first_seen":"2025-10-23T21:23:43.749571Z","last_seen":"2025-10-23T21:23:43.749571Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/bonuses.BzflMXV-.css","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/bonuses.BzflMXV-.css HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=luX3385UxnY1waqu; __ddg10_=1761254547; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=m2VvVyLqGmsGVivc; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-60d4\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24788,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (24787)","md5":"516eaf07aebe3632e008a643f92e3f94","sha1":"9a8908f4bae8a8b9163ad89d73a6c0135d13ce1a","sha256":"a797f9b9843a2cbfdb8e0782bae1cc4bc95203ec45826b60705d2aa965456480","sha512":"c498362efa77909412764b07dd2521efd6f6318e5146bd6e214088b9b1eafe96a3707214ac6bbd2252b1a77c85d154282cca23f0fc7960658362041692777cc7","ssdeep":"384:jmpGBpGsHU7mjlt97359/3td6ec8cTRByP45MZWMipatC/MSq7B:jmpGTGs07Op7nYyP4GWMipQB","tlshash":"c3b25232742da468f03bdadab4d42699351d760395438ffada687c79c9cf1e73232208","first_seen":"2025-10-20T13:01:38.535104Z","last_seen":"2025-10-23T21:23:43.78003Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/C8r2xahW.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:28.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/C8r2xahW.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/Razus-0y.js\r\nCookie: __ddg8_=quQJlsAc1g4dyXDJ; __ddg10_=1761254548; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Xw3JnIGoO6fHGLwb; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg10_=1761254548; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-228c\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8844,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (4518)","md5":"f1425e58dbcb996f09a7066850e57676","sha1":"33b4019f748ec480a9f11f1b499abedca00018bb","sha256":"01e617222b759213e4dc338e2337ccfe113873ce7befe0cbe686a31b6efb88f1","sha512":"9e4e432a23c0571055b0552ef6484ce7144b021767e9c3109f93e80f0913e252d296c207b6107116dd9d9a345165b69cf0b13bf6b1f7bf37dc4dc01e829010b3","ssdeep":"192:xis9TeBXRAf7qprTRY6OoySwJWxb5Y3NgqlPMu8vc39f6leHNJUdGUnEen:x59yfRY6nySwJWxb5Y3NgqlPMu8vc39+","tlshash":"dd020415d4ff4caa637730e11c2d8c1134185b42df528d6398add406ffefa6c66863aa","first_seen":"2025-10-23T21:23:43.78286Z","last_seen":"2025-10-23T21:23:43.78286Z","times_seen":1,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/entry.B0BOi0i9.css","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:20.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/entry.B0BOi0i9.css HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=9ZSoKAj7K7DPbray; __ddg10_=1761254540; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=dbTVkbTh5CTjrpNO; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\n__ddg10_=1761254540; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-1080\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4224,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4223)","md5":"61f0bd26cea7d117c5e7c486acc68d00","sha1":"6c8bcb0f1c4f0fb0f07276c5eacd898124ed10df","sha256":"f099b430b92e0f00145cb9382b4a9ae5fd988a1e4f4bfb3043e5a938efc4ee39","sha512":"f9bc1136e2349b7ac1471ec7801d8047312f950e30808796e33dcc45bdf4cc68b709d9a30c6ae3f2cc7371b4d47bd532b8cc59e09569e52f1d9a1b30cb0b91c2","ssdeep":"48:qBK1KVrwxo7yXr29OKJgbKA7cb2XYKBKJKeKbKaeEaSkeEnS0SSSWS8VSfHeEPeG:qxi8yK9RHN4MEBWWXIShv7JRhW4D/qi","tlshash":"4491ff7fb288f6580127ff02a4a15bddf42b23b0b2522a15f2d5523061b67d1bc29d7c","first_seen":"2024-05-30T05:56:49Z","last_seen":"2026-06-10T14:34:42.966261Z","times_seen":189,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/eurostile-regular.i2b9H2-b.woff","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/eurostile-regular.i2b9H2-b.woff HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=ZjxJBk6wrzOAHxNd; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=tq3Zs6QJkJoGyKh6; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: font/woff\r\ncontent-length: 97680\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: \"68f899fd-17d90\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97680,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 97680, version 1.0","md5":"535b1e86232aafcca96b143529c8226d","sha1":"9408a42efc92ea6972f4d0f50560c22ca84d8a08","sha256":"c5a7a7d506426bb073f4f866f0ea9f3c57c8e856444e5403494d9db263e85671","sha512":"b54f1a43cd21271056f02d0626c573357b3ad962969d24a7c03914513d6644155108d5fb0608d47c734e650e1141de70cb9cc13e1ee1f08830c33ecd7dbb8abf","ssdeep":"1536:mndVS5OB0M0Lfxv9JKgzmzwv25WCnEx2pW594UIi/m3KYdu+WLSkNQ:mv3BbuX0gswcIb4UIi/m3K4u+B1","tlshash":"95a312039a03b7246d764afa2eaf4b39f5d4ef988d0d63c147e1a410194d52f2f6126f","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-04-25T06:32:47.453739Z","times_seen":81,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DlAUqK2U.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/DlAUqK2U.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=82yFQzxAXCtyCkhF; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=pQWKgQxUQzhSeh2N; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nddg-cache-status: HIT,MISS\r\netag: W/\"68f899fd-5b\"\r\nage: 2\r\ncontent-length: 102\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-07-27T14:20:46.915264Z","times_seen":24751,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/BbYtGCksAYQdPJDTYQPLx1j8uWvvJOxnyALsBpxD.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/BbYtGCksAYQdPJDTYQPLx1j8uWvvJOxnyALsBpxD.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/webp\r\nContent-Length: 236410\r\nConnection: keep-alive\r\nlast-modified: Tue, 15 Apr 2025 08:15:38 GMT\r\nx-rgw-object-type: Normal\r\netag: \"4581a5b7a04b0bec7b14d35c4c76041c\"\r\nx-amz-request-id: tx00000a06a204aad3626c4-006879fd22-1676fdcbe-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":236410,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4581a5b7a04b0bec7b14d35c4c76041c","sha1":"c0f3acef33f99bea6a0d7ac7a9868c3faf898591","sha256":"3a05178963c1df632070122b540eec32c0051b292ad9a71483e9532f37598e17","sha512":"27ab914c3d8996a84a4607a197eeebadb525c6b1bd171bd980735ebeb0c28d48c44f6219f3480d80d259d9964a102783cac37cef53bf08a7dcdf185c4666f239","ssdeep":"6144:/6fOXPxV6UtWbQ0abtjvu7MhYP5zjfH1JO6YBHPwHRdF:6cxbkbQ9g6YP5jq6YBHIHRdF","tlshash":"ef34235a0d9aeb5f53c81aa40983d6088b100a5c3d7db32b8f7a385dbd3fa548f535c2","first_seen":"2025-08-09T06:39:59.095877Z","last_seen":"2026-03-01T21:47:53.30129Z","times_seen":32,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":143,"dns":0,"connect":0,"send":0,"wait":52,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/C6v4_gPe.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/C6v4_gPe.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/YlOf_41J.js\r\nCookie: __ddg8_=WTUXGcMiUqGqNkKS; __ddg10_=1761254547; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=y5sHjN5M9S7JNuTJ; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-d79\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3449,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (3448)","md5":"0bd8134eee6c2f7999ff16d2d1d34907","sha1":"046502fbef95581d59c6d1c37b63e579cebfcb62","sha256":"9bb2d2ee27cdf054129ac8bdb215a035891dc42559db71f8a8544273e07e2f5a","sha512":"77a187b79cd506cca25d9d77dfe6cc7646c79c51d24231ede8a97a5aa4c7a7be4564d9bcf05d83045c8ada9a648afbb21530cb5539da43f8504a2da9407a88ac","ssdeep":"","tlshash":"0361960fe84554b9063174e8a218a5947a3c1fede2941841a3b4dff70b97c6db238bd6","first_seen":"2025-10-23T21:23:43.790017Z","last_seen":"2025-10-23T21:23:43.790017Z","times_seen":1,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/api/v3/welcome-pack/get-welcome-packs-guest","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"OPTIONS /api/api/v3/welcome-pack/get-welcome-packs-guest HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://www.gwcz87x.life/\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=LGI62YpF2LcfNdm6; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg1_=OGPWjmihQv37HIJKJgbE; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 2749d986-6bbb-41c7-a38e-ea55eb7c91a8\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T15:05:58.256156Z","times_seen":17565140,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/CVWiPBN1.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/CVWiPBN1.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/CC-JJjPk.js\r\nCookie: __ddg8_=eBAasD6kbyVXouU5; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=j4TXbCSN6rldSPpJ; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-76f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1903,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1902)","md5":"38f3230b7c4993f8ddf8c89b0f7912bf","sha1":"d6909b04ffc405fb5d96f98bc9a180881e541fa0","sha256":"1f201889d5b20e9d10338f17b350166a68af3e07d1e44ed3e4bdb6ff6869c37f","sha512":"05cdd0de21e356871c2e4511f29ea55f310f29e4a17f3c3f41580b65f867a9032fa69a8725dfa6498ec10a0b2646d04fe87ad53757acd036e4955863e9e35972","ssdeep":"","tlshash":"d141a68c78bd89b882be48c7b45a216063d91fe8103ea8cb72fd1c345b52804725fb04","first_seen":"2025-10-23T21:23:43.793492Z","last_seen":"2025-10-23T21:23:43.793492Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/517d2e03971d41f6875781c9d5bd4443.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/PragmaticPlay/517d2e03971d41f6875781c9d5bd4443.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 28436\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"292c32f96313eb629c6048365b9cfd30\"\r\nlast-modified: Mon, 06 Jan 2025 19:16:14 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18502F9314D16366\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 4946\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g9dkPEP%2FjzZDsLNx9PUULmYKncVJZ3LCnRtQzW58J4CDuX%2BDMqbIqXv5vZwbwI%2Bvgay7fG01z5jt6pvDhp4D6LD%2FJTRD4Jv69nahYbf9\"}]}\r\nCF-RAY: 993332df99fc0e10-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28436,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"292c32f96313eb629c6048365b9cfd30","sha1":"6a4d8d3da115b58939986073e0f1e6e9a169ff75","sha256":"31082483e8edfda486e628f211c772c0638b940f0838dc7bccc910fbf23d8d09","sha512":"078c6bef153f7f4958a768a44ad93ed5f3c80c46ebcc36af22bbf63af8afc009609495d28562cf4e344218b5a91d7b90923d98094b3153b71f70bcecfa065684","ssdeep":"768:UELWwDo/GftPDWMePOGaMfMtRY3vBmG7NsMIZySnx8A06c:rWlGfRDX0CtS3AGJ5I5xO6c","tlshash":"55d2f1a75637eb3d2f64a1b9588bcc7fd1899acd417e44d18389994c124f6db8372c0c","first_seen":"2025-03-21T05:40:08.927157Z","last_seen":"2026-07-12T17:41:43.58519Z","times_seen":35,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":245,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/D823X0Qk.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/D823X0Qk.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/DkfJfwvf.js\r\nCookie: __ddg8_=tRb8IDCLyZelYsVt; __ddg10_=1761254547; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=vsblQMur8SuESCbb; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-14a5\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5285,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (5284)","md5":"ddc7cdf84b01ca62629198aeecda0b79","sha1":"46710cfa31609978563e8bd8a556cf441e4d0db8","sha256":"625ae81b4bbba24ba500f941fd3c64d2b597bf5be22fc71c363616adeaba4760","sha512":"5f0208373b7ef27d6244e48a97f015459023c6fd5d6e03d24a0324d86aa044cfc9d55e58330133ba0ed9b33c57c29e0511a45e43e83f0dd7bcbf7a8ae8384082","ssdeep":"96:nZyTsFvwmBocgjI3Y0Pmn/6MjNZDht0+cxxV8i05rZC:ZyTauUobdfF5FC","tlshash":"17b16418e864cdb6d112415eac0b14d079dd3eedc4b5e435e4f879902bbac3ca28db2e","first_seen":"2025-10-23T21:23:43.799855Z","last_seen":"2025-10-23T21:23:43.799855Z","times_seen":1,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/ThreeOaks/7925d4c8b4aa44a1929abd608d1ff874.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/ThreeOaks/7925d4c8b4aa44a1929abd608d1ff874.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 35878\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"2180cf705991319ff9e63245a169e5f5\"\r\nlast-modified: Fri, 26 Jan 2024 10:04:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18708E3A31477E8F\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 1498\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WGYJDlAtjXeDTHT5JA5AdjnwNRZ0sUmGW%2F395UQqDfi%2FVv20wcWJPcsHszF2B9Q%2BOLWX50cu%2BFC%2FYEOpoUlhdXa%2B20uFYYQ%2FP3tNdGdW\"}]}\r\nCF-RAY: 9933967e2eb0289d-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35878,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"2180cf705991319ff9e63245a169e5f5","sha1":"09194e582590635e85096164137b7b297e2461fa","sha256":"61ddc27e8108acb7cb5c9f70106dc71b5896b1159944b19130240797caeceb08","sha512":"05098c72c6a1a4be35340f397c6f157f31f0c251b3dae030e58d3b278a959151bf078f74ffc65b8b6ff823ca85184a1e68732b18bd44b9325598970251b1da97","ssdeep":"768:ABRCN6HeNb2yE0FPMU790R8GZvl7eFfoSjuMCfGgSYpQQ:0E0HA2yNFPMU7+KGZkxoSiu7oz","tlshash":"06f202923032a0e40739865975f0b747ec9c10b1b7f74b5b54ab8266ef2c260a7a7c5f","first_seen":"2024-05-07T05:57:00Z","last_seen":"2026-07-16T16:33:15.724566Z","times_seen":51,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":51,"connect":43,"send":0,"wait":86,"receive":1,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/463211d8a53d7dab42157e08e3ba3435.png/3jF43bxkEgXwrlhbMo3TgKzQF9EqR4QIOK1QvLdd.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/463211d8a53d7dab42157e08e3ba3435.png/3jF43bxkEgXwrlhbMo3TgKzQF9EqR4QIOK1QvLdd.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 566390\r\nConnection: keep-alive\r\nlast-modified: Fri, 02 Aug 2024 09:48:31 GMT\r\nx-rgw-object-type: Normal\r\netag: \"43a5036cbeb9805da9a59b954b6abbe9\"\r\nx-amz-request-id: tx00000ee560cd36d73b63e-006867c47e-162d5ff9f-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":566390,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"43a5036cbeb9805da9a59b954b6abbe9","sha1":"ac6da28e7472176a2e19d4e65b3018fdd5363d2d","sha256":"bd6e839f0658e4b87100f059bf0003cc1ce75859a62df4987c4ddb5c38131b02","sha512":"0a22948891b7b0c9710ff3246da5bb567906c572571bb67726926d97401fa811e1c8853c1dc7ec58a21b7f925d94af6716796f07accf15b528d00b4339310549","ssdeep":"12288:H6avv/X+Kv69uQ+uuS03mU9YTiQ84sdfQh+azkWVYA+1H:Vvv/X+Kv69xub3nKvsCNzko+Z","tlshash":"c3c423930fa6906ff216d21df0650c685efb54212e5f05dd2a1faef905b039ad390637","first_seen":"2025-08-09T06:39:59.116547Z","last_seen":"2026-03-01T21:47:53.319472Z","times_seen":21,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":245,"dns":0,"connect":0,"send":0,"wait":31,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/SlotItem.53B0cU5p.css","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/SlotItem.53B0cU5p.css HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=x0UitSVpR8Zi2AfN; __ddg10_=1761254546; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=MwJERWdbp5VP7Dsx; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-97a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2426,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2425)","md5":"b14d226191796659cf7b1120e9bb135e","sha1":"ee251b67aff5be5a88a72028241105b6995dcb65","sha256":"5e8753c788c3b12f8fa4c550c3ac5a33c26ac32be1532b81c2f3be403b722ab5","sha512":"eae06dc163e40d7d0b3dd3093eb7dbd1ae05a29bc44b8153fa5b33f3aec27588f70e039748cc1d6411a4e2c6cafe575532e264ce868bab375e4ce1165d828b35","ssdeep":"","tlshash":"bc417721f50f686f64b7f3b0e5924c8e31bc9343e53e062eb35a9514c78362a1d320e0","first_seen":"2025-09-09T11:33:29.073473Z","last_seen":"2025-11-28T02:25:21.304382Z","times_seen":17,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Home.COQPz2RO.css","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/Home.COQPz2RO.css HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=tq3Zs6QJkJoGyKh6; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2WPsWoXnUqdW43Qo; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-7cf7\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 5399\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":31991,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (31990)","md5":"6b4eab726a27b8e21e6baa30acb7e73f","sha1":"f1a65bed6811fa14d4f386fb9b485123c48c0a2b","sha256":"b33a4fde2406f8bed6514c5b06ab0f5a7d16f05dac7714c9df5ad962bc37b9ed","sha512":"caed6d65e126d8784f5c9025bec40a4ea616bdff3f26a58acb94a47688d79d37372bfce003cfb808557f76adb11634fcd8439ed1d9c2b3b7396985a4ee86ae01","ssdeep":"384:7c9CzzCqetr9K8rMHDTMutXaYHsYCsk7JWGCIEw5W2OxI:+Cpl+MjT5sYCxtOxI","tlshash":"53e27731661c207db07bf66ab8e1669d6118f607eb2317bdd6947428ccdb68232376cc","first_seen":"2025-10-14T04:24:50.31049Z","last_seen":"2025-11-10T22:08:33.877611Z","times_seen":5,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/middleware/mirror","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"POST /api/middleware/mirror HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nRegion: RU\r\nContent-Length: 29\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fjkCtTOV3JxDmwKA; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg1_=zb6RdbRhpivNuJf8GmSC; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 87108b88-db8c-489b-912d-de658e4ba7b1\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"28ec1eee5f4049e3c4f2135069c1d2c8","sha1":"3505519507ca1c2a089c46e100b80408ca278421","sha256":"edc48cd3b0bc4fa7ba23aad40b8508a17d370ca38be174bae2a2f64634e65a2b","sha512":"f71618e40ebaa14ab6d523a2341258c0da264b545388f8fffd14c31c64b35f94b21eb633316c4d77afcd864aade1db588ef6387ee0c4787e6f7770db0abc1183","ssdeep":"","tlshash":"f06000020000002088800a000220aa302a200a20080a0080000c30200020080800a002","first_seen":"2023-04-06T19:00:00Z","last_seen":"2026-07-27T14:07:04.338742Z","times_seen":12759,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/jkc4TBzu.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/jkc4TBzu.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/CC-JJjPk.js\r\nCookie: __ddg8_=kXuItyf5t0D6HwUo; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=kXTQbp8zZzjHxMjJ; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nddg-cache-status: MISS,MISS\r\netag: \"68f899fd-36a\"\r\nage: 0\r\ncontent-length: 470\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":874,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (873)","md5":"fb35155dafd468808a3729d5b58c54d0","sha1":"32b2533d2d44f21fbd35b48bdf79c4d8ffd1128b","sha256":"d0a38a6a1eaa78a609a21602401fdd690922618c1eeb4ca76c736eea6c7a739b","sha512":"e84ffe3b324763a912c484d5a4103dc842b6e830ceb79eb24a185cc69101938986da371a59a5707e1e1a08f49daa7a41a0fac307526fb339ea1facdc11c4821b","ssdeep":"","tlshash":"b811afc070d4a87583b4498805dbaab1a429ca943de782c5d85e1e33227fd8cc57ab0a","first_seen":"2025-10-23T21:23:43.807881Z","last_seen":"2025-10-23T21:23:43.807881Z","times_seen":1,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/tPdbiW_V.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/tPdbiW_V.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=xnOodYOWtzBVM52n; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T15:05:58.256156Z","times_seen":17565140,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/ext/cdp-customer//v1/analytics-js/646.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /ext/cdp-customer//v1/analytics-js/646.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=j4lfNxdNaKWI7Dpy; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Rx8g8opRBVVUhQ9B; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\netag: W/57a98141b93ad7f0310e6134ab19ac9e\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: public,max-age=300,immutable, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nservice-worker-allowed: off\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":26551,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (26551), with no line terminators","md5":"c83e6df6ffa3af6337495fadc058adf3","sha1":"1bb413dd66d4e85907de4414bb98fd17be6ae482","sha256":"d128bb0eda8faaee8ff9b04a261ad0e835dfe1631768aa39c1a54952261d5787","sha512":"7ed7358de7f6d30a0c529a75c1fe9b1e6e79b34f8753538873c0c517dd28c52e423abeb772c0be518d344f2f513f3ff1c7b5b511aa99645b7596f4edb7771749","ssdeep":"768:i4V72U1y21F6WiEyKS3K/70fjjtRBlWBqnNyV18u8/zo8NyB5CJ:i41yGviEy+0vtnNyV18u8/zMO","tlshash":"bbc2f94a316a393d83d351e7bd7a3006633b7555b849c041b2ade8872f294cf6273f9a","first_seen":"2025-09-25T08:21:12.740421Z","last_seen":"2025-11-07T14:36:24.349236Z","times_seen":171,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_ipx/f_webp,avif\u0026densities_1,2,3/img/vip/mainPage/money.webp","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_ipx/f_webp,avif\u0026densities_1,2,3/img/vip/mainPage/money.webp HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=eBAasD6kbyVXouU5; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=0k0WSN435RnEfTEz; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: image/webp\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests;, default-src 'none'\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\ncache-control: max-age=60, public, s-maxage=60\r\netag: \"1bee-wA/H+k1e8UR2p5NlfOr42pBApbQ\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7150,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3e0d20f5a2d729dd27c8452b80b95939","sha1":"c00fc7fa4d5ef14476a793657ceaf8da9040a5b4","sha256":"a97c6079842b58ded77787a7935ff429197e357dbf2785663ead679716693dae","sha512":"db18664f988ee7046dd6098611e29780ca06ed2eaa4a538cbff5ff6698b5c17838a36d9f2ffe88851d8d8e764ab07808c604a7c441bca5dcf8f3a0613cff4c52","ssdeep":"192:rDnnDtMWC7QCQJ4NwSImgrL0Zj6q0xGkeYJIb:HDtMlQJ4NpkL0Zj65","tlshash":"a0e19e45042767e6d3572427fbad790772432b61de1c01c31d78fa768daa40f277c58a","first_seen":"2025-08-09T06:39:58.831335Z","last_seen":"2026-03-01T21:47:53.450168Z","times_seen":34,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":104,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/js/button.js","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /js/button.js HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:24 GMT\r\nContent-Type: application/x-javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Mon, 29 Sep 2025 21:14:19 GMT\r\nExpires: Thu, 23 Oct 2025 22:22:24 GMT\r\nCache-Control: max-age=3600\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":899155,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1210)","md5":"587e13c24d17141fecff62e86a00ffc4","sha1":"b67c345ddb508d91f6aeb774a086db22cef92530","sha256":"b18d676e74a1991942986057293a33b529fe3b5bad23ba68c06667d67a1d225a","sha512":"8c61210e82be9f7e0581456056d8592a8c4f15cd5a361e5c37f57308d367406b80487b99a2c26a4530eb777f8ba43f7a5ea584d7bfdbaf710527871be5ececec","ssdeep":"24576:/o36wXnnOqCNTKi983ht1x2vRfXjXjryWsz9tQ:/o36wXnnOqCNTKe83ht1xYdTjryWshtQ","tlshash":"e2155c897644353a82dba2bf702b170976379552a444d46cf878e8d4bfb4d09823bfbc","first_seen":"2025-09-20T02:53:52.592022Z","last_seen":"2026-01-19T12:14:51.147852Z","times_seen":173,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/ModalNew.D0RF2N-h.css","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/ModalNew.D0RF2N-h.css HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=Ns3gTHgj9bKaSgBE; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=gGQaBRSMWBj1kVET; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-2e5\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":741,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (740)","md5":"6efb4656a407f3686b166088151a886f","sha1":"2f2681b413a7cc3ed27ad46eaa009ec8d32be3e1","sha256":"21d1100f0fea9e17044195d8dbe0e45933d1d7ae10e86b7c2db5934b11076060","sha512":"638b13027faf5daf31a0aef39a5df4894b46efe1253a9e323efcad0b85d8fbe0bf7aa11189f078b0c22267bde518631f5cb9b8e2de15065c9cebe8fccab42687","ssdeep":"","tlshash":"8c01f9b12d6c926c30afe143edb74f98513517b64717eabf9d3071a14cab5c138228c4","first_seen":"2025-10-04T05:11:03.455562Z","last_seen":"2026-04-15T02:03:05.939501Z","times_seen":57,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/games/casino/statsGames?limit=4","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"OPTIONS /api/games/casino/statsGames?limit=4 HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://www.gwcz87x.life/\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=b6k6mcroLWZ8ZaY8; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg1_=7IATgdvUUKoc8JWxKdkO; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 3a9d529c-3c35-45fc-b5c9-c87f85fa246d\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T15:05:58.256156Z","times_seen":17565140,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/games/casino/highRollers","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"OPTIONS /api/games/casino/highRollers HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://www.gwcz87x.life/\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=E3KUCd9sAXk7Mqzi; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg1_=IbkJ3g232ZwEEjkpZSv8; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 1c928202-538b-42da-84d4-44fc3cbebdfe\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T15:05:58.256156Z","times_seen":17565140,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/d8f118e9bfd01ace4f417a8adf3c72845788a658.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/PragmaticPlay/d8f118e9bfd01ace4f417a8adf3c72845788a658.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 21161\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"4e6f71a1dc12f9edd4678a6908361bda\"\r\nlast-modified: Mon, 06 Jan 2025 19:16:33 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18502797A60490B8\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 4447\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AbQjibO3uNHGkuklNpoagqhfGWyDWTIyn4xOyq4Je3HAhD8h9cFHL2Fwq%2BUNpM1mrNMviAFkUSMJtiny85aSwWrgVVS2jC3ERDKAiFIu\"}]}\r\nCF-RAY: 99344003487e6638-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21161,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"4e6f71a1dc12f9edd4678a6908361bda","sha1":"b13e37da6fa29810d5ba2b19480453497ccc3756","sha256":"b57968514a26ecf5aa665e277f0ea32bb174afa50b69f91ba75f9e6c19a64de7","sha512":"4d849dd4a7e17de9d4d86fd17b5d845c07625d0ddb02f2ec837bbae49d5b96cf26e8c724d0a16fa96d45705648f3508542d414f09049c2cd80107586bcf2d2c5","ssdeep":"384:3JDdAl4YanhoJhAn+SLERbPQ1i8o4M+SOVID:3JDel4Yan+jtmihP+36","tlshash":"1692e1778c5ef8b56186312b437ceb404eb8939ebd054e236e17f29e6f159a3035250e","first_seen":"2025-03-21T05:40:08.950924Z","last_seen":"2026-06-26T01:47:52.323076Z","times_seen":43,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":273,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/Pxc6mBVO5jZ6nQ55qSul5ejqFdK35b2vNwsGJby6.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/Pxc6mBVO5jZ6nQ55qSul5ejqFdK35b2vNwsGJby6.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/webp\r\nContent-Length: 93838\r\nConnection: keep-alive\r\nlast-modified: Thu, 23 Oct 2025 13:23:48 GMT\r\nx-rgw-object-type: Normal\r\netag: \"99ef5240f132bd86a31aa94bd1e332b6\"\r\nx-amz-request-id: tx00000f84528baa7d947da-0068fa2c66-17732f619-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93838,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2160x960, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"99ef5240f132bd86a31aa94bd1e332b6","sha1":"c1ebdcf04a95e78969fc3d6a7e63cd374c25a2bb","sha256":"d9ff9d837b4dd53a704bb84cc9fac2d0d20d653bc80a4177c70df99ea5b70691","sha512":"80090854db54024827c43e41406c53defacad605fa22ae76ffff1e83f2afa83ed2eea59c76005117826e748153b47f3eab20d8af6e45efe66df7ee4f59a9f1eb","ssdeep":"1536:1IShxGf7A4QvGgAPZqZvpdpcvxv2RWNV2qe4QKm/z97x4I+vlzSaSpYpxeZKj:GSCD7QvGguqdKvxvpEqJQKm74I+vsopp","tlshash":"b99312c15de7a38c42bd5d5e8e2c360a6f4a31a965d1c10b4bbc36b60b5cc9b4aed1cc","first_seen":"2025-10-23T21:23:43.83092Z","last_seen":"2025-11-04T07:52:58.893537Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":161,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/h87hjPaLoDcjBzAyiMAnjlZgZeUIaZ1KLJ19t5PI.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/h87hjPaLoDcjBzAyiMAnjlZgZeUIaZ1KLJ19t5PI.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/webp\r\nContent-Length: 57076\r\nConnection: keep-alive\r\nlast-modified: Wed, 10 Sep 2025 13:37:57 GMT\r\nx-rgw-object-type: Normal\r\netag: \"9f3d3451c418ff41b859b6d7e2a4bac4\"\r\nx-amz-request-id: tx0000053b665c508ce9668-0068c17f37-1739d9a9f-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":57076,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1380x736, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9f3d3451c418ff41b859b6d7e2a4bac4","sha1":"be34ed90905d7be18bdb826679a1b21056c9451b","sha256":"f4ce5c5b0a6718ba35f7924b19ceb3b9d871d9e462737e1a70548b52844d5ce5","sha512":"8699fd7af8666e942956c9b02e17f3104dc707e283d94fae8b11317d120a4534ac73eef3626e00947192c7eb0e9d653b8c96a75c53bb480b4f307f60b6bfd5bb","ssdeep":"1536:oOarTxraavKhDpvu0XGzYcIVPqnAaSU+7e3kRBU/MvZd9BQxO:ovT5tiD25zmCAWQe6UEBd9BoO","tlshash":"7d4302f02ffcda5015251d959c29634ecfe8c6c506f41b87906ac32a37c63fba90870a","first_seen":"2025-09-11T21:42:04.018979Z","last_seen":"2025-11-10T22:08:33.823846Z","times_seen":9,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":206,"dns":0,"connect":0,"send":0,"wait":46,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/zcbSYatoRoBfsYXcnObHPNieRNCaivNCXJpkCiC6.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/zcbSYatoRoBfsYXcnObHPNieRNCaivNCXJpkCiC6.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/webp\r\nContent-Length: 63334\r\nConnection: keep-alive\r\nlast-modified: Mon, 01 Sep 2025 09:36:54 GMT\r\nx-rgw-object-type: Normal\r\netag: \"76be7e0031c010909f74233bbb6e4641\"\r\nx-amz-request-id: tx00000441d6f69c0867d75-0068b56b26-1731a253f-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63334,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1380x736, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"76be7e0031c010909f74233bbb6e4641","sha1":"4257f488e4a8c7a1967c9844e737bfac3cb0273d","sha256":"fea8c360a15fc0111abdd65f0ed658f53bf59230922485989d91af01e11ddd80","sha512":"43a1632247a81c881e677b2a480c55036e3ba89f9fe2c6d0761a4c6d23991b76f4856109f68c29f9bf6720b8318909662a2367d816a4e5f875b7f9380fe3eb5f","ssdeep":"1536:vtSPa83q+BmQIzkDe+so/1HOmyZ1cq17dASbvBR+vyOSeCXlIsacY:F2tZqxo/Wc+WgvBRMSKF","tlshash":"605301c41d2d545331b3ea4bb868f3bf819889789187867c94ac4d43b2da0375a6bd3b","first_seen":"2025-09-09T11:33:28.972212Z","last_seen":"2025-12-29T21:49:40.383528Z","times_seen":21,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":228,"dns":0,"connect":0,"send":0,"wait":43,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/dlv.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/dlv.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=COX1br5bRRAvboib; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-9f81\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40833,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fd10397e4cde4d6bfc4e9ba25ff4f3c4","sha1":"ce2eb8e4d28d5e12bdaf25db6320cc00560be2a8","sha256":"d806932121ff74dc7848b1c401bfddeed58a476519d0aa74d475689f17ac383c","sha512":"be0caa33b1518ac871e6e6b0085812d838c7b67b6a7648e56db0cd67cbbb38da7c8adf11fa36c7ae314b837682768b229310afb657395c0698db2e4a5f4ddff2","ssdeep":"384:B1pLXXAlMrUrUcbAD7BuPhJpoMUVecccCcqrDiI3N0/PAW:j1HAlykUcsHEPFUEzTDiI3N0/Pp","tlshash":"f803ac6bf724dc37d28ad3bcd954806432298696adc4c38192f9ff1f992588a3d4e7c1","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.890504Z","times_seen":80,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":144,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/B_Mdq3qX.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/B_Mdq3qX.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/l9CMu1bs.js\r\nCookie: __ddg8_=3RwUFnpbxrXG4Xdr; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=BdwmUEyvgRoIULW6; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-457\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 489\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1111,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1110)","md5":"ceed729097ff6a2df780d14abc33fdae","sha1":"4eea4d6aea0683aad27ec3c6cffdddca21c63d4c","sha256":"c31a6e2e99e30b5435dc049fcfca948e1563ddc0780fc066fcbc7568761943ea","sha512":"ba36492e728822a371503f42e356faac4f81ea03c4e996e3b63f92daa1f34a9e300f29531376894415800ed3482e89a9fd020f212d127935cc670c0b683461aa","ssdeep":"","tlshash":"8e21687d4aec2dcc091cbc842ad8ad7c7514d2496181cc8638a6fed7f487d5adc48471","first_seen":"2025-10-23T21:23:43.842202Z","last_seen":"2025-10-23T21:23:43.842202Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Icons.D23eBLyo.css","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/Icons.D23eBLyo.css HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=82yFQzxAXCtyCkhF; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=llHx3xb9hMxDOp87; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-2ce\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 167\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":718,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (717)","md5":"a5d8beb06ee754b84b50f73ee1ef7404","sha1":"1aca8ff932d685db1952d3cf776d6e17b3829865","sha256":"1a20dcf2d19a1597891112fa69be000e980e4fb5406b70149588d0527da24e64","sha512":"802a67f83b4956d42e868bd89e6ef249c52087eae49154dadf54adeaf635778594355bbfb1b47b3558c9e348b276bd50e11816d6e47d6ad03de38c735a09ed68","ssdeep":"","tlshash":"0c01bc7d364af913532bde9e8288102391f367a7dd4909003ec32837b3626581a4f873","first_seen":"2025-10-09T03:35:18.358013Z","last_seen":"2025-11-10T22:08:33.978341Z","times_seen":9,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/hNTNdTBUxlC7sKgBnvnoNmTYkvzt3FOEqBNn5P7D.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/hNTNdTBUxlC7sKgBnvnoNmTYkvzt3FOEqBNn5P7D.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/webp\r\nContent-Length: 57252\r\nConnection: keep-alive\r\nlast-modified: Wed, 17 Sep 2025 06:05:57 GMT\r\nx-rgw-object-type: Normal\r\netag: \"b57ae9c087c2d21965b71da0f80fd8b7\"\r\nx-amz-request-id: tx00000e6d172d6e652f60b-0068ca4fc6-173b8ac76-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57252,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1380x736, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b57ae9c087c2d21965b71da0f80fd8b7","sha1":"1c8b64f23b7bba8d993b213f2c56d46c2aeaccee","sha256":"cb696e64f16997d31fda562d2128f019bfa0eb7807973982de391ff8418cb999","sha512":"5278708eeb8f6e35ca650fd7f224d32f8e26d8057fdaaed77a58e19084bea1e221e5cf441c59c204578d65cea51e067a80574eba55e5166538474f2263e8309c","ssdeep":"1536:A8lP4vydcUbdpg5bwVB4Q8pkb+ICMK+86H48kOLF5:A8l+ydcWGxQjb9CMK+XHFFJ5","tlshash":"8c43f107140a0ac776fbb2ce8f79e66575fc8a32e91d2907505ce5c3b218b3622df498","first_seen":"2025-10-04T05:11:03.534Z","last_seen":"2026-03-01T21:47:53.475861Z","times_seen":24,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":205,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/vkGFNfXPWz6kGmJuVFqHZz60Jn1PJvYqaQ0CaeRm.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/vkGFNfXPWz6kGmJuVFqHZz60Jn1PJvYqaQ0CaeRm.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/webp\r\nContent-Length: 83666\r\nConnection: keep-alive\r\nlast-modified: Mon, 16 Jun 2025 16:57:30 GMT\r\nx-rgw-object-type: Normal\r\netag: \"f3d5d70dd5d6a4e1d27a75ad21088cde\"\r\nx-amz-request-id: tx0000038c0dc591881fa3c-006867c79b-162e91d58-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83666,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2880x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f3d5d70dd5d6a4e1d27a75ad21088cde","sha1":"c0ea3b56ebaa1edadda97f7d57800d57ef66d4c1","sha256":"6fc0c0defe0cc85bcfeff16dc58e880b4b91abb81a668f99793b796fbd76e0c2","sha512":"53306d2be770126c46e6b3260badd757e026f38d7e602cccc9c86fcf074a2c47777c0bf0a50edb6620e1736600cc8d7f5faab3b69afca5e9bb60c575523864c0","ssdeep":"1536:eI0BIWfA2r7S+6bexDC9Hh+UfGeZYVfC2Woud189mDydlbBY4AVV:0bfzuvUDC9HY7tUDm9v1HM","tlshash":"20830208fa761d070bd214f69934b1eae5a124fbeff655187456b4f82119da0b03ecc7","first_seen":"2025-08-09T06:39:59.056033Z","last_seen":"2026-01-21T08:18:56.837454Z","times_seen":30,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/blueprint.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/blueprint.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=x0UitSVpR8Zi2AfN; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-1ac1\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6849,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"799a505a45ff7b99c4662d5de8e0e143","sha1":"a8133ce38ca74f81200a3764f4b5c86142304a73","sha256":"9633c2f351c615d520abc9db32b6123c98ccf00a0039700d62468ee45ee0a386","sha512":"4ba877b7ab2501c21d3c1ef383e2db99dcf4209c73d0f2f2754b79d823ccd05c21d1421558884b2037d96ec41c0569d643a260961d0e33c1092de8a03558085d","ssdeep":"192:cyxK+91V6I2jzn57EEr4k0Bj65ntvYXxuz:c091V6/pAdk0BHxq","tlshash":"75e151ed77dca2e0b109b7e4ca2ba874362734f63a72d90d43ea7d14862151e48ddcc9","first_seen":"2023-05-21T16:42:19Z","last_seen":"2026-04-15T02:03:05.894519Z","times_seen":68,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":163,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/habanero.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/habanero.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=UcBWcwucAnYOQMUt; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-1150\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4432,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ddad478ea5ebbdb655251c9c30837098","sha1":"7cde431a9cae5937b46ba7ef2824b71cc52925e8","sha256":"eec76f6c2dd79a72c753dc39a8214f7e6764fd896864f55b29f4a025e9a2ad56","sha512":"92b6cfc0fc40759f23cf2cc638c1748b86bc0d0875ebbcf5aca8d6aaa251f26974299a3a441467bae902fa9e53d269a85cd9c3977a313f5378b7c95c55df6ba8","ssdeep":"96:/VStVZWkO1J3+PbBjdAs8YhsliWaDn3RYKohMLn4t+tdqlG:/gtVZuJw6s82stE3RYiLnFgQ","tlshash":"f69155fbe6d888e2e287c7f8c644987871fa24fe7a52c2da41e07e9e25300dd054c9d1","first_seen":"2023-10-28T21:30:08Z","last_seen":"2026-04-15T02:03:05.906679Z","times_seen":69,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/BnfXAfmC.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/BnfXAfmC.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/YlOf_41J.js\r\nCookie: __ddg8_=WTUXGcMiUqGqNkKS; __ddg10_=1761254547; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ic9CTHSgy2lyJnId; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-8c7\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2247,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (2246)","md5":"8a89376a241fbea1604d6977aeae217f","sha1":"317aa48f395220fb03d5813de2054a1785f42128","sha256":"4673c80b7aa735671d12d253ac81444723cb9738c9674af15435c35611be806a","sha512":"889b6f408eebcad2282fb8fe4bcd5ffd0afb065e675ef280324ee9891cd7e37072e05dd0e6ba299bb8a28f6b8b2b897f7c4a07bffd641d45ecfc993863fab30e","ssdeep":"","tlshash":"9241df0e9486d164eafb0051a51c0681621cad9ee464085df2fce7effb0c87d7b0da70","first_seen":"2025-10-23T21:23:43.85208Z","last_seen":"2025-10-23T21:23:43.85208Z","times_seen":1,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/8gjymX2c.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/8gjymX2c.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/l9CMu1bs.js\r\nCookie: __ddg8_=3RwUFnpbxrXG4Xdr; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=L9R5N5JiOsCBnWNt; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-length: 2063\r\nddg-cache-status: HIT,MISS\r\netag: W/\"68f899fd-142c\"\r\nage: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5164,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5163)","md5":"9ea452fd7ca8f740340f5037394b8648","sha1":"ba3ec376e700985891799f79a26d1f9454630c2b","sha256":"5e9d220e027bdb3c09d97701d87934192c515d59c7a494662500c319b7af9b68","sha512":"f9142def794aa47a52c4297d6f21934e6a2947911fe7e1269c53d218f369653eb330911025b66ff7fee5ae124f6631cb4c7de69b73205a22804aa2abb677a936","ssdeep":"96:mq53hKMoKMj1j83LdeFp1f5HnPx1oRstVCBR4Ir8DtgjEby+EUECPRv5:x3BY1j83sFjvmQVCkIgPb/D","tlshash":"9eb196d4b0d9e0dbb7764fd1c036225260076ba57834e0d0f27aad73215be58a562b3f","first_seen":"2025-10-23T21:23:43.286682Z","last_seen":"2025-10-23T21:23:43.286682Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/bonusWagering.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/bonusWagering.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=MwvIx8kkViFTZlMm; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Ns3gTHgj9bKaSgBE; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-652\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1618,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6630c9a6d86e7827d983c8afd4f3c47c","sha1":"6d52149d8636231b07cb30c3da8f7549410edca9","sha256":"2ec295a534e212461e58cf5dc3048ffd1207a417f03be96c22ff0f2a0462652c","sha512":"7802023b06e8452ee55427dacf6914bc7bc7ab0695a974a031f0a68e2b14a3b2c7b5423fc8748a852f5ac8c43ffdf545ac9dcf9ba5959f385ce9f9dfe7a96f10","ssdeep":"","tlshash":"7931c2faa2c4e6f19f436392c8a0a038f74b106637580f94a370d7d9fb7a05d4a49cd5","first_seen":"2024-12-10T17:19:34.230323Z","last_seen":"2026-04-06T22:48:49.699125Z","times_seen":62,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/Spinomenal2/f7b227e6c36f58e56398a43edaff34dac728307c.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/Spinomenal2/f7b227e6c36f58e56398a43edaff34dac728307c.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 37782\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"6d86b116cbb1596ad799a0d0a40d991f\"\r\nlast-modified: Wed, 04 Jun 2025 07:36:27 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 185D50DEDC878C7C\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 6341\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q7eOaCRDjcYjD5KS2NTjpwIkWQ4LRUmfSFFny4j8ZouXMYe9G7QHOuWSlsKvEA%2BnZn7jFveEYvRstOcIeXqgRnxoyv9G4TCaAZfva409\"}]}\r\nCF-RAY: 9933de936e0ad595-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37782,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"6d86b116cbb1596ad799a0d0a40d991f","sha1":"cddfe353f9319e71cfd75e0e7ac3d62d91e07bce","sha256":"cb79ae643021e4528661de291bb8cad5bfbb80f51351d26d1b75fa633b696cd2","sha512":"939b2b1508f6243ae77fcd4d7b8d96ab668534fd1bfbd2ec209e3b662035788b36e4d43871e0d856754fc9129ae8a67011db58963c677c7cc1cbeb73ca0de3cd","ssdeep":"768:cXyzKbupyDNTSrVK1euS0I3GlcVjRUXO5vjQYA8PfB97c:cXybGmrUYureGojSwLQYlfDc","tlshash":"0103f1e80b7840f37c4be380456b0900b22e69cb1bde2469e41776a350f5aca6cd2f7d","first_seen":"2025-08-09T06:39:58.984053Z","last_seen":"2026-04-05T20:02:46.677632Z","times_seen":49,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":173,"dns":54,"connect":59,"send":0,"wait":86,"receive":1,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/5878c98bf96de5c3ecb4fa37ddb45928da161525.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/PragmaticPlay/5878c98bf96de5c3ecb4fa37ddb45928da161525.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 23925\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"e6531c0c47e53a6a9001584a0194da73\"\r\nlast-modified: Mon, 06 Jan 2025 19:16:47 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18507266D278FE66\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 4033\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HbYhjaV7cUK6pL1VYFbq44s0FUtK9iE8o1RCXt2%2FckoS%2FcCTroRyimCbURMQIZ6Fma2YWQFDvoYU87C11RGyIe5nDxMVp2FoWt0nwBDd\"}]}\r\nCF-RAY: 99330ea1f80416bf-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23925,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"e6531c0c47e53a6a9001584a0194da73","sha1":"9030997b339b418d7c3b8bf99eca4a7d28330ed1","sha256":"f88d4515fda6c8f1caea76b6ee1adedf6b613a24c8bba1751675fe6ba8625b7f","sha512":"908bd49718f2e979f6d0465d9d17533d1a7d3642e8161281c5968dc52f456cda5a4c188fa5d25b6cf8217fa9f0f530b6558e67415d7083471a4c9528faf3221c","ssdeep":"384:mL/RpeeVLdRQgRMGMIKG53P6qL4opDGjHWV5sBi/SPIxqlKL8/KbAujLRFqR3vmH:mLpgeVLdRQOZ3Sq/YH5BusIUlC8iMuBh","tlshash":"d4b2e1e651544f58c4fe3e774f0da4591cfe81e36e26a09deaad41b7a33ec20968d2c0","first_seen":"2025-03-18T06:51:28.240368Z","last_seen":"2026-03-01T21:47:53.269507Z","times_seen":43,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":34,"connect":43,"send":0,"wait":84,"receive":3,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/bde39d2cf80fdfda99f94a09f98ea3e7.png/QeB4EAPO8RU9bCNa9LX89tRKA0fmOT6xSArX52cM.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/bde39d2cf80fdfda99f94a09f98ea3e7.png/QeB4EAPO8RU9bCNa9LX89tRKA0fmOT6xSArX52cM.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 511082\r\nConnection: keep-alive\r\nlast-modified: Wed, 02 Apr 2025 13:57:32 GMT\r\nx-rgw-object-type: Normal\r\netag: \"92e2f4e846193281be0b1d1d77b435eb\"\r\nx-amz-request-id: tx000004a688b3b0178c2f9-00687df46d-1681c85f7-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":511082,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"92e2f4e846193281be0b1d1d77b435eb","sha1":"081cbd706f129a27843eaee07f688c3af9d06cc4","sha256":"2a23a278398c1a889eb67f7273c26937fd47f8b0b474a7bd94bc63b87fd0433b","sha512":"9e9a2d9f12df24f9a16ce8b57936e624cae68f955f16c3ec2584d24e3b1feec0fc634ab7a46505099a080055c33b357427f1858adbe2fd5d3a136df98c9ca964","ssdeep":"12288:rxmKzSxlzqAY28qx1xRWD6c2Zcf7hlBkKmKx1Ptg1R36j:rJzSzTY/q6rhlBkKm8tGAj","tlshash":"4bb42317efcbda01976f1095add359700a61645ae8f78f44f8cc8c29bf6d43206ea268","first_seen":"2025-08-09T06:39:58.792738Z","last_seen":"2026-01-21T08:18:57.013066Z","times_seen":20,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":326,"dns":0,"connect":0,"send":0,"wait":50,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/macawgaming.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/macawgaming.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ykIE3XwIY4ouUxP8; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-e0d\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3597,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a64857193463cc5a699c9859bd0424eb","sha1":"31a60ecc62a7757160d6d58b767444f599cb9ba0","sha256":"556fddcc2b950f549a72e74525a921700449590527849a874f2f45d724a277a6","sha512":"13f341a3ea2bb76649a7dae5b8809b970eefa8b5df62f02368ea5c16e529a04ca3ee6b497531848cc51fe026f350efbed22a99e139ba5e26f7dec924b787acd5","ssdeep":"","tlshash":"427182a1c3f862e4f009b3f0862698b6365729fe3b12df4947ea6e60821100d89d9c93","first_seen":"2023-10-28T21:30:08Z","last_seen":"2026-03-01T21:47:53.20689Z","times_seen":37,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":118,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/faq.DFOGLISY.css","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:28.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/faq.DFOGLISY.css HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=y5sHjN5M9S7JNuTJ; __ddg10_=1761254547; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=quQJlsAc1g4dyXDJ; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg10_=1761254548; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-2f6\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":758,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (757)","md5":"306272c6927c2496e08f548542e0da8a","sha1":"e647ccc9ff258ee98275ed537ed360b3106abdb7","sha256":"0244d4475b329c9d3307db454e40a5942bdf6fd200b14d9ed6a2d946ed337930","sha512":"bc83b21d0f1f854baa4e958b6f57affef6be73253f2f0f1720ca8225abe97c251ebceb6d5d1a99d9ebbf1f6efc7771b64374cee42a8ebd41789bd16b8cd4703d","ssdeep":"","tlshash":"88014502b86c3c2a604fa508a1d376673131f55f8255b6b9b9106914cacbaa913723b7","first_seen":"2025-10-20T13:01:38.597034Z","last_seen":"2025-12-16T06:29:49.466553Z","times_seen":13,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/vip-club.DYJKHZDS.css","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:28.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/vip-club.DYJKHZDS.css HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=y5sHjN5M9S7JNuTJ; __ddg10_=1761254547; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jj8FslBpDVMWXGkd; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg10_=1761254548; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-1764\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5988,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5987)","md5":"b6b7350fd88d291542273225f4848a4e","sha1":"068d7aca85174bebc73afba044e483698a2fcb89","sha256":"1a16c22d84d1b5422b230206283c712387d0b7506459b547d744729a943c505f","sha512":"0b1bd6e8773af8a33840198c7f8455567248c1fcc0f9f9d33e2aa48b127d01c0fca77cd7fdd11543f95e8cb5980eda4bac5a05fa672abe7837ffd99272e381a4","ssdeep":"96:EnAsUfyjferlpwOw2XHOtPHMJSWMaNuYwMWSMrGwC:CLj6jwn2XHkaVuYw7SMrGwC","tlshash":"fec110537418f06cf07b94bea882de55b310fe03858792a59ba07739cf8b49237a179d","first_seen":"2025-10-20T13:01:38.555522Z","last_seen":"2026-04-15T02:03:05.882464Z","times_seen":52,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/cryptojs-aes.min.js?v=1","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:20.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /cryptojs-aes.min.js?v=1 HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=9ZSoKAj7K7DPbray; __ddg10_=1761254540; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=8RRtk2YH3ZmKnwFj; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\n__ddg10_=1761254540; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-359a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":13722,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (548)","md5":"48d53de53ce7fc1aa9d2ae1eab743450","sha1":"49c423b7888546b2a1acc40ea0bc22ceaea00bbc","sha256":"b0a10cb56e9fcde48ac1ec5934689288acaedef664b55297592ba2027f6e97ed","sha512":"4744074125773bc58dd979fd58ebfdbcb4b9b1b2f5c431d4217725fb98e64af69e905338b8926a5fa7c98eef9cc2aced6e04a61e47d04d7de71fe5f7ecb89345","ssdeep":"","tlshash":"6c1161ca77cbba4292e17028003b610ef127a49ba93497d0778c40e78fb180e4026f78","first_seen":"2025-03-25T01:42:26.038638Z","last_seen":"2026-05-28T07:10:50.239611Z","times_seen":198,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/D79Xm9UW.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/D79Xm9UW.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/CC-JJjPk.js\r\nCookie: __ddg8_=kXuItyf5t0D6HwUo; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=oWSPuqGWRDH61i3m; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-length: 2835\r\nddg-cache-status: HIT,MISS\r\netag: W/\"68f899fd-1896\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6294,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6293)","md5":"361c2887a64506744d7b789a29ffca7d","sha1":"f94e310d5af438f3dc8bc1302895d88487ce107c","sha256":"f2fe248d342fdc83e05b1ecfd76787c2ca90b25a4bf32d3f275452fd1ae2f194","sha512":"10c1ee235b7e1214cbe3a2ab39d483b6b00b3a4560005c806b70d7ec9951af42c49116b8882d03be459b163330c300b44fce024215dc6d3258de50af809d672e","ssdeep":"192:6pazyEaxrcxshi0pM3bumtmRNwDA8T4uC3/bR5AmMbgj9ak9rLX:2azyEaZcxshi0+SPQDvk/F5rMS9aeP","tlshash":"4ad11bccb4a67021b37b4ae5d0b78107763829a1348bd4e0e01eded73e15a62a792d8d","first_seen":"2025-10-23T21:23:43.483867Z","last_seen":"2025-10-23T21:23:43.483867Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_ipx/f_webp,avif\u0026densities_1,2,3/img/home/home-coinflip.webp","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_ipx/f_webp,avif\u0026densities_1,2,3/img/home/home-coinflip.webp HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=eBAasD6kbyVXouU5; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=n6Dd0caDudvQWPhW; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: image/webp\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests;, default-src 'none'\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\ncache-control: max-age=60, public, s-maxage=60\r\netag: \"8a94-TQ2c3vUPt5b9+6NXji3fVi2pqcA\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35476,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0012955decadf7f351dcd95b1acc3ca6","sha1":"4d0d9cdef50fb796fdfba3578e2ddf562da9a9c0","sha256":"64b3ce9b8e7117a79656e0307dcf1d919699c6a567bcf286c9c367c125878975","sha512":"d75a7f623e3b6eaf27ddfa6ad2e6fdc7c3a11bff8bd3b715854ebdf84a1e4f773f67ea73741dd4aa981498a84252cfa397d1860a4ee8f342e10043021a518b89","ssdeep":"768:kMQWbtGgfYTcaCNHN6g1u/hoa9nuxfytgsMZ9+mNWJ03wM4Rv+mQ:VQeeAaCNt6g1u/udx1z3+/e3wMuG","tlshash":"0bf2f1a05e599fac4862e127d9a3497483016f6cd0efe29788e4b9c8db1305db69288d","first_seen":"2025-08-09T06:39:58.978777Z","last_seen":"2026-03-01T21:47:53.460203Z","times_seen":34,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/1393b69d6f928c7230bda26ec032a23c.png/yvuJBhAavxDU6ND4Ul1D9vlsGdgQVUshrkcGtkQ9.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/1393b69d6f928c7230bda26ec032a23c.png/yvuJBhAavxDU6ND4Ul1D9vlsGdgQVUshrkcGtkQ9.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 374100\r\nConnection: keep-alive\r\nlast-modified: Tue, 03 Sep 2024 06:51:35 GMT\r\nx-rgw-object-type: Normal\r\netag: \"4de62d9e6879435915381cedfa83725d\"\r\nx-amz-request-id: tx00000cf604f673a7c0df9-006867c49c-162d5ff72-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":374100,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"4de62d9e6879435915381cedfa83725d","sha1":"ab1c2425f1e58f66d61eac3ebc4fc4fff4886cfa","sha256":"e326b99f9cc358561e0022b4be85b3e30b55c775dba2e72b01cfea76f6fe8ec4","sha512":"777c5f727e78a41a24d6587820a6001744c989ae935bc4a0bbc3548567f7b89501eb695da7d67310d3d7a1dc451157dfcef6208c3b78cdada01a4a90a6051b07","ssdeep":"6144:UJzJg5eOlf4iGU4JVDfZvpVSZfHkUlcFe7iaJqx0s49iqjOj2sW/QFE:yUV4i3wVDfZvqZPRF7RTiJW9","tlshash":"5b842355ef536e2284126ec19c5a8e27d55882a0fa866f3f11bdf4ee4ae38c45cc3f41","first_seen":"2025-03-26T02:25:21.384691Z","last_seen":"2026-03-01T21:47:53.502104Z","times_seen":33,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":157,"dns":0,"connect":47,"send":0,"wait":86,"receive":185,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/ns.html?id=GTM-KN757LMM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /ns.html?id=GTM-KN757LMM HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: *\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 92\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":268,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"4aab75dcb6382c39dae33c9a1b45e608","sha1":"a8e4758330308a44ca74242cb17591e6c6599483","sha256":"d818a014761cd9516d1b3e296946e960d91f4c917bf42a808e67323a8b062da8","sha512":"0fe058db29f10d9f41db7b0cc9cbe8e403b36b07fa7a99b9699ce7cf60748d248d8a79b1a56f4bb006d507059fbe8ab73ce71b9a44ee095a6da8dea54da625ab","ssdeep":"","tlshash":"2fd09b4fd0013404d92052b05cc2776414516544f5e58d536582f4355d44755cd53158","first_seen":"2023-04-05T07:30:22Z","last_seen":"2026-07-26T22:58:48.603414Z","times_seen":5048,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/cryptojs-aes-format.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:20.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /cryptojs-aes-format.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=9ZSoKAj7K7DPbray; __ddg10_=1761254540; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OXerGRrAR1eOFv6p; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\n__ddg10_=1761254540; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nddg-cache-status: MISS,MISS\r\netag: W/\"68f899fd-5d6\"\r\nage: 0\r\ncontent-length: 526\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1494,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"e6bc38f77922eaa6f1b23716034b4a2e","sha1":"db781b1e30c4f2a1d63d47054f0903c463cf01ab","sha256":"9ca00bddae85e30d59672da0089ea5e132df97d75a92f42114fe1befbaeaf32d","sha512":"0ad7c00c1564d77f8463dfc81003c0d6cd6ada4e3d01094331f72847f17718e4a6b2c7a2a0bcbd96a1107bc6cb9bcb1721e7b2968ae4544595ab98d39bb30c82","ssdeep":"","tlshash":"163177407debb4c287e8e1d50435a044f67b7a0ab1558ef3aa5aa404ffedf3006326e4","first_seen":"2023-03-07T18:27:54Z","last_seen":"2026-07-26T09:44:04.955028Z","times_seen":716,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Fqb33JjP.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/Fqb33JjP.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/l9CMu1bs.js\r\nCookie: __ddg8_=3RwUFnpbxrXG4Xdr; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=HNSRKAW0p3Ubjr5S; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-405\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 643\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1029,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1028)","md5":"f7ee77146715ddc5dcb203c8ac5bf158","sha1":"0861a36e16f5d8cd3994873071bec4e345978a9b","sha256":"715e1a3277a55e3d523436f8be5b9ff8090e8dad371002d9c6ca6491d248151c","sha512":"36c9ccfcf25ca222e6ab57aff1f8c216965f37eb27817b9da53d1cc50e9ab13c6b66c799768407a5c937db73499f617897f799b7dbb9bdb696cff52e7ab432c4","ssdeep":"","tlshash":"0a110e2bfa0a0b2663331c7a46a931e6cf650bcb2c7984c43c54df261237c83e5a6f44","first_seen":"2025-10-23T21:23:43.880984Z","last_seen":"2025-10-23T21:23:43.880984Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/roboto-bold.BeRaP8H0.woff","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/roboto-bold.BeRaP8H0.woff HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=Ns3gTHgj9bKaSgBE; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FGtw5lm99qvXuD9y; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: font/woff\r\ncontent-length: 141532\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: \"68f899fd-228dc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141532,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 141532, version 1.0","md5":"ba3d7f35e4e84772d778ced098c5a40c","sha1":"248262cc71832afb331a103116b8a5f061693cc3","sha256":"7abf45d601fc5dbc8c482c9cf62916b8463b14d4d9a90e0b5888952401f784e5","sha512":"6cc5d27fdd4030a66cde525d52c9cfebc1a2caa3ebe10a49b538694cba096fdc7ea57f2c4a2ea153bd102885cdb9e92d8c5c129dc38251be93bc6426ada89a4b","ssdeep":"3072:4SGRte9oLIED5Zc02YQeQDKyY6s10mehsr4QIaw545V:2GYhX27e0Jl3s7Ii","tlshash":"fbd3229fd04ca4e2c57fb6e1c4e74ef0a5b53cb6d10e358f1292c9118207ab9e8e6649","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-04-25T06:32:47.439749Z","times_seen":64,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":95,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/api/visitor/v1/configs/eng?jsonp=true","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /api/visitor/v1/configs/eng?jsonp=true HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:24 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 5438\r\nConnection: keep-alive\r\nCache-Control: no-cache, no-store, must-revalidate\r\nSet-Cookie: WEBIM_LOCALE=ru; Domain=webim.ru; HttpOnly; Max-Age=86400000; Path=/; Secure\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5438,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5438), with no line terminators","md5":"0adc6032145996801e6950e19ae53913","sha1":"36da21b8a5d01908df43d409edc59bf00c715dc4","sha256":"a4424987ebf32bbc8276aa2659ca0a4530777a709f8e5ab72eab7ab0fea485ab","sha512":"378ac4f6abd7423c03b99fe913bf4355d0b44fc324a1e1ddf2f1649700439599be72ba90ea84eca55ca0d784702c2e75f2b168fe96f399635f2c79283552c766","ssdeep":"96:mdzMOTx4+lggVgYq/S86yky/ZWYH9XOc4U+4s/cQtW6CVgpcf:YvOVYqK86DKZWYHccwUQw6CX","tlshash":"42b15271d126003b16c56a16ed396a8e27799292e340ef2e8f1c0817f3cd9b562437e2","first_seen":"2025-10-14T04:24:50.340991Z","last_seen":"2025-10-23T21:23:43.884294Z","times_seen":3,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DkfJfwvf.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/DkfJfwvf.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/Razus-0y.js\r\nCookie: __ddg8_=luX3385UxnY1waqu; __ddg10_=1761254547; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=tRb8IDCLyZelYsVt; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-11c0\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4544,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (4543)","md5":"3af1f54944626229bf82f3033d6c2bcd","sha1":"3310c82a2fb0a70e651ce9be06f9706b3027f1cc","sha256":"219da91711799dc0882e2813999550fb98089b5b7bcfb29150ffe359c32cfe26","sha512":"cc0185af192f46a5bed925a1fdfb6878563e3d05da7abda2eb99e1c4d10a9d3b57d14b435eb38206c1af1369830fa901982b4a33f35c7ff25dd1118846a8fd36","ssdeep":"96:6LNlTYiN7xRLwhaFoZYYHMaMTTJ7FqGeXytq6:6plTYM7Lw9ZYiMaMTTZFqrXGq6","tlshash":"ea917719b0445cf8dab187ced84108a159db9ebf9410e97173fa2f3027d5ca4e217729","first_seen":"2025-10-23T21:23:43.886749Z","last_seen":"2025-10-23T21:23:43.886749Z","times_seen":1,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"gs.jdwqqi.site/socket.io/?token=\u0026EIO=4\u0026transport=websocket","fqdn":"gs.jdwqqi.site","domain":"jdwqqi.site","tld":"site"},"ip":{"addr":"91.215.43.62","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gs.jdwqqi.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 05:41:47 GMT","end":"Fri, 28 Nov 2025 05:41:46 GMT"},"fingerprint":{"sha1":"A0:04:FE:A4:D6:2C:BC:C8:08:C0:C7:1E:53:B1:71:4E:C6:8D:D7:E2","sha256":"FE:C1:18:11:0B:D5:DC:B3:B2:7C:2B:2C:2C:D5:40:F0:B2:74:A7:52:80:A8:D3:B3:88:BA:A2:FC:32:19:BF:42"}}},"request":{"raw":"GET /socket.io/?token=\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: gs.jdwqqi.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://www.gwcz87x.life\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: n/R9reW0DkEBI0ueNK+PXA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: ddos-guard\r\nSet-Cookie: __ddg8_=puS5sq341eMNtAVj; Domain=.jdwqqi.site; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.jdwqqi.site; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.jdwqqi.site; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg1_=Vw59BkmPncYLWGnH7Ggg; Domain=.jdwqqi.site; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:24 GMT\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nDate: Thu, 23 Oct 2025 21:22:24 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: m9fNCSFVDco0RFnbqMEBkn4blg4=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover; server_max_window_bits=10\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T15:05:58.256156Z","times_seen":17565140,"resource_available":true,"data":null}},"time_used":565,"timings":{"blocked":0,"dns":107,"connect":127,"send":0,"wait":273,"receive":0,"ssl":165},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/2d90c08b7b6927b4a04aa1b58f6bc336/Novomatic/fb66293f9d2a4a1ab917235c6f4c3d31.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/2d90c08b7b6927b4a04aa1b58f6bc336/Novomatic/fb66293f9d2a4a1ab917235c6f4c3d31.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 30833\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"118a08c344cffc8d3ef51b984ea05af6\"\r\nlast-modified: Thu, 16 Oct 2025 14:31:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 186F392C4333B286\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 4763\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qv4k2KeCQ10MAYmZyA9%2BrX10tEl298RKN0%2BggKJeKbQ7TRHMWTqtjzP%2FbKTqahJOIYTvVSTFcs6g%2B4CNEe%2BRMl9tAaqwwC1E2VhnauBm\"}]}\r\nCF-RAY: 9933baf1deb2a56e-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30833,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"118a08c344cffc8d3ef51b984ea05af6","sha1":"bc2942fbf38181f212dcaca384be13468d76c9f9","sha256":"10ba1676f2d8e35a9f3e683babe519e7e76fd3118b31b739bcf5e191ca352b0c","sha512":"ad6d89f0ca3fad60746ca4d6da95fc8ba465b70bd6ed5979d14806fe88964f12668208ec9c36677f4257d4752edaa259d3543431894b6473a599900304f54ad6","ssdeep":"768:NNJH01qbmOP63Cxe+Av+Tmx9p+Tyf+r2Z2tWR0SP2v/+Yb:NNJHw8ms63Cxe+AHX2CZ2tWR0bv/1","tlshash":"84d2f1994c197d386ae4822320d2e54805925ce7da73921d7d30bdf5337b3ba63e782d","first_seen":"2025-10-20T13:01:38.512839Z","last_seen":"2025-10-23T21:23:42.993439Z","times_seen":2,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":210,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/images/default-department-logo.png","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /v/images/default-department-logo.png HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 15479\r\nLast-Modified: Mon, 29 Sep 2025 21:14:19 GMT\r\nConnection: keep-alive\r\nETag: \"68daf6ab-3c77\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15479,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"53a142e29b647ceba5a2adf6cc69b919","sha1":"37fc7f6523e5f4d9e01157c70acc74069bfff416","sha256":"a5b367cc08f01ae61da2109c04047ee7e218df860be597c35d4ca7e064fea63a","sha512":"898a79097ada980f99bc1fe495cf55aa54050d286e108e9fec3f1e53e75b0a88e650a53bbae8a5b0c708f227367b3b193c45103c482e71066a9c0a8988aca61e","ssdeep":"384:Vk8Swa5Qg42uLHe77h+CnqUMfgFvywxTcFOid/BQkrO9okl:ONwa5QgRuW7UecFOi8krO9oU","tlshash":"7e62c0eddc7f24cfbcfa527e1d9d0c1e4d989e240170a8f64ef3d49a4821a66d5029e8","first_seen":"2023-05-01T22:32:10Z","last_seen":"2026-07-26T15:38:30.836133Z","times_seen":2294,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":68,"dns":1,"connect":19,"send":0,"wait":39,"receive":1,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/cryptojs-aes-format.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /cryptojs-aes-format.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=nrh8Ho07bjRKfr0F; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FeYSK2YosH9pUVgz; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nddg-cache-status: HIT,MISS\r\netag: W/\"68f899fd-5d6\"\r\nage: 2\r\ncontent-length: 526\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1494,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"e6bc38f77922eaa6f1b23716034b4a2e","sha1":"db781b1e30c4f2a1d63d47054f0903c463cf01ab","sha256":"9ca00bddae85e30d59672da0089ea5e132df97d75a92f42114fe1befbaeaf32d","sha512":"0ad7c00c1564d77f8463dfc81003c0d6cd6ada4e3d01094331f72847f17718e4a6b2c7a2a0bcbd96a1107bc6cb9bcb1721e7b2968ae4544595ab98d39bb30c82","ssdeep":"","tlshash":"163177407debb4c287e8e1d50435a044f67b7a0ab1558ef3aa5aa404ffedf3006326e4","first_seen":"2023-03-07T18:27:54Z","last_seen":"2026-07-26T09:44:04.955028Z","times_seen":716,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/roboto-medium.eJsCudPf.woff","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/roboto-medium.eJsCudPf.woff HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=Ns3gTHgj9bKaSgBE; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=gzZ4oY19k9AvSpst; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: font/woff\r\ncontent-length: 140892\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: \"68f899fd-2265c\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":140892,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 140892, version 1.0","md5":"cf745939a2f0d88aa9e9e111d03f0c44","sha1":"e3e7869aa64560578586af40a475c0dfa55b8b77","sha256":"7090bfaf91390512f722b859fae9585ec5f662e31fbc00a0a281859f92c54c4e","sha512":"ff2483368f008496135c596a8b2863a9c5953a52041c85e03d3c01e6d4cb16ee74efb5411da034b9606b1a23e2d77ae472c9bfdc0b5358440d96c2a9a22232cf","ssdeep":"3072:tyGRtev6xczb/azWnXkjS3k0wzb9QZyKqtU0EzCq5YLA6+Txvw545N:FGiGzb/LnUwwzZUWN+B","tlshash":"4bd312b5d6a53397eef8fdca71a80f62279dbc48e8ec8f0b251c48543507ca9c276520","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-04-25T06:32:47.456343Z","times_seen":66,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":84,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/df61abd27adc941e19df1accbe88208ba21e4f70.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/PragmaticPlay/df61abd27adc941e19df1accbe88208ba21e4f70.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 22623\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"c350dfa4e887c264c9fb0d1635a1b2e3\"\r\nlast-modified: Mon, 06 Jan 2025 19:15:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 186FDC1D834A013D\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 3189\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2FKNWmyaaaWxRM89XD%2Fu0%2FTw46vtSGki1nAyeMAakNxnEWvkgzHCKRWzHS3XhdKv2p%2FC1qOwttKL2TxQiJIXrCPPC6ZfybuPomQ8HZ%2By\"}]}\r\nCF-RAY: 993409d578da4f5f-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":22623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 200, 8-bit colormap, non-interlaced","md5":"c350dfa4e887c264c9fb0d1635a1b2e3","sha1":"7d7bfa744ccbe4a2c0106e800f3de9bd3909503a","sha256":"fd55f07b1fdb3125900271bb5fd6862299d2edb3239e10a70a75eb7017937a3d","sha512":"4602d35c64a078421501425229f2b7b91d333ed2433b45bd13de564453bf43006359b388fa9c32cae25f686f704e0ee4eae4fe69576e27c7e1aa23a8db26145c","ssdeep":"384:IsNJ0kNGPTq1f3C6cBN7LF/6/mFYorwgY3VjeBkXTORZjWD/2M6gq/h:H0EKO3CBPLx9TkeBCKRZCDOTh","tlshash":"a9a2e02a5383f57a70da3125e9c8686084a7b410d1e96f0d2c9e101b2ee678be7dd737","first_seen":"2025-02-06T08:02:39.093262Z","last_seen":"2026-02-25T19:06:54.122407Z","times_seen":39,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":35,"connect":55,"send":0,"wait":86,"receive":1,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/netgame.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/netgame.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=rRwJQBoYQv5k4Kzf; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-b73\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2931,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6cdfc6dc5429074c5e070125e79a44df","sha1":"8acbdbdcd7906d983245bf7170d8d2f151463068","sha256":"c816adc9db1b1195d65773fc5d47a73db0711fa49e38e5ab5c5f4245780f76fd","sha512":"8c365afe7b3d42f9657ffdc0a1c41b6cdd52ef50c28a26668a8435b541b2ba3ec2e0a2015be92b412ec82f67106df75ec0110555ccf72ed00c6a98a7464f4d66","ssdeep":"","tlshash":"865142da734cc6e1bd80e3628b5bf839202321f4771741906b620aa56cd965f1c6eed6","first_seen":"2023-10-28T21:30:08Z","last_seen":"2026-04-15T02:03:05.843681Z","times_seen":68,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/l/v/poll?action=poll","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:37.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"POST /l/v/poll?action=poll HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.gwcz87x.life/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 174\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:37 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 2\r\nConnection: keep-alive\r\nX-Webim-Version: 10.7.130\r\nAccess-Control-Allow-Origin: *\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-07-27T15:01:33.050347Z","times_seen":750898,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/default.p4T8Rkj0.css","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/default.p4T8Rkj0.css HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=82yFQzxAXCtyCkhF; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=bavtoOY7yCSPKw92; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-ed27\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 9269\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":60711,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (60710)","md5":"77afc64e20a33ee79a262b7502c48f1f","sha1":"4efd3c4e314ba7fcd323bc97a5ddae3bbdc6bedb","sha256":"d4f2972cfb2b23da29d5fbc8420c85c8a5baee8bbf872bbfe0665833febe2391","sha512":"f739525e72b55d118864e0f8a9173e0c8cd2be779c76f090535fece8989e2f07564d30c422865e2c080c403b8afba8dfbf8c5125b6f5bce8f7bcfc07fc4dbc0c","ssdeep":"1536:nxQPLOQpljLHUoUEfjFVy/2RxCKrvkYbHvkJDvkdl7k:nYrv5bHvWDvi+","tlshash":"f0537731b21d6038b53bc961b4c0568f2139f347d523dbaed9a93639c88b1d33b66789","first_seen":"2025-10-23T21:23:43.894168Z","last_seen":"2025-10-23T21:23:43.894168Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Bhh7OxXO.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/Bhh7OxXO.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/CC-JJjPk.js\r\nCookie: __ddg8_=kXuItyf5t0D6HwUo; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=xgph3cWZpFMNk6II; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nddg-cache-status: MISS,MISS\r\netag: W/\"68f899fd-201\"\r\nage: 0\r\ncontent-length: 314\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":513,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (512)","md5":"137ce657e9eca223e00d0d16f44cd126","sha1":"b7cc6dd5fb5480e257e7b84b9ac6f4296e1a93a3","sha256":"1881716bd3a956c02e0e68153fd45d4a9431028a73ffc4cac22062dc67d27b1a","sha512":"00e5352ae596507a20001f485f0f3cb4e957373cabaab8da1801fa7066552d1926327fbb461655214d8382d516bcbb4f558501a8e1753b08215048b216a8c75c","ssdeep":"","tlshash":"6df0508b1caa18941dd51f7b9027b0a2737a556e01018085feb1e6c5a20b59ef32f530","first_seen":"2025-10-23T21:23:43.896975Z","last_seen":"2025-10-23T21:23:43.896975Z","times_seen":1,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/fdc4364a3eae2f06260e2f95ce9571ed/Belatra%20Games/a35ba034d66e0acfd1046961fa1b5242f219a347.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/fdc4364a3eae2f06260e2f95ce9571ed/Belatra%20Games/a35ba034d66e0acfd1046961fa1b5242f219a347.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 29434\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"3fa0e8d16b0bc9d147481719efa1f335\"\r\nlast-modified: Wed, 01 Mar 2023 08:18:51 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1852018A4DA24539\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 3087\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ClPYlBBabWYuFCgipsNDsrIK00oyRwW5O7LEHe1guUyBilTGG9uuIpAlTdwdh9K9Vkk7Uk8PQQhGF1x24LgvYzgVqy%2FYCnIBcmrfocp\"}]}\r\nCF-RAY: 993446fb4ea706da-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29434,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"3fa0e8d16b0bc9d147481719efa1f335","sha1":"7fdbc1a775f4acffa18aa472925f383d8555f564","sha256":"426bbeb8740cb4e18c8b4086e81e5c4fc8a02247906ae5b904d71406e1dd9ac3","sha512":"affb32d8f59ce551c284df2c1c8e0da154517660e6d7a7956b37a60a62d15c552d2cf63eb7f2b9e3cb9f7826ddc44c3f26cd74de23d291cae7bb1000d13d1687","ssdeep":"768:U+iUGZjbBE6RJxNHQeIavACk61YR9xGRKoQ2l:ULZjm6HvfYPxGbfl","tlshash":"5fd2f017bda4760a87da93aa2c0df91d66ad300032d8fd3796f603cea65088ef817750","first_seen":"2023-10-16T21:45:28Z","last_seen":"2026-07-10T18:49:57.329667Z","times_seen":80,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":206,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Bv_l3iC_.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:28.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/Bv_l3iC_.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/QPlbqdGQ.js\r\nCookie: __ddg8_=y5sHjN5M9S7JNuTJ; __ddg10_=1761254547; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=b44q61b7U22cOc67; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg10_=1761254548; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-917\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2327,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2326)","md5":"469bedd6f31461305f960383ce235665","sha1":"b3c6fb07e649d4d2d7f89f17e2e79b50a36850c4","sha256":"ca9e945e726e35d1ee2399dfe2116007dbfcc06f944e64791600ab154018a3e0","sha512":"49abe6035b45a97e1295f8b1546d278089210f9630c82b2eaa2cc1f16398b4f2aca01aa141b2302fe787da20958e9a5d5ec1d2b3dd9a8e46217524f305bfa0cd","ssdeep":"","tlshash":"c84112e3932448e75862e4c538e35a305b5599e8e1fa2089bc3acec5725ea07fc38770","first_seen":"2025-10-23T21:23:43.902244Z","last_seen":"2025-10-23T21:23:43.902244Z","times_seen":1,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/YpTHRXUVV8y3Te0EwAmQnmennzgNXFUTTu0dP0XM.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/YpTHRXUVV8y3Te0EwAmQnmennzgNXFUTTu0dP0XM.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/webp\r\nContent-Length: 73956\r\nConnection: keep-alive\r\nlast-modified: Tue, 15 Apr 2025 08:15:37 GMT\r\nx-rgw-object-type: Normal\r\netag: \"9a773c21983467c255fe7bbd02667fb7\"\r\nx-amz-request-id: tx000005c3e540b8f07d4af-006867c79a-162bc1ad6-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73956,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9a773c21983467c255fe7bbd02667fb7","sha1":"db1e348493ca3ded5f629218d4471e7471221149","sha256":"ffd11efe09b4bc901483802f03afb981adb9946d496bc911e6df0d016dcc2e1f","sha512":"4db5829d92e1c5b160facabb86fe2d2ed9c72f6c53d3ef5dff41f3470006640143fe5a4c7c12483b9b0344e1a7b5f6b24f986723f55cfadcf3ce8e60a98c4652","ssdeep":"1536:jbntPzGRq9da5rMnDuNP8C1VJ82pLpdcOCacUc9QevCRaXpQV:XFT905QDuV8C9t5UCJc9QyCRa4","tlshash":"7a7312a432d02955287fe7d1bb9e6e8c017133101fe092db866e7d7e9e0793419d623d","first_seen":"2025-09-09T11:33:29.135285Z","last_seen":"2026-03-01T21:47:53.239614Z","times_seen":26,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":233,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/l9CMu1bs.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/l9CMu1bs.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/Razus-0y.js\r\nCookie: __ddg8_=2WPsWoXnUqdW43Qo; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=3RwUFnpbxrXG4Xdr; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-584\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 855\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1412,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1411)","md5":"086b3b6ec278b86c967a69be90e1a7c9","sha1":"d9de87b9904711358dc69dfa86cf31fb6ca84665","sha256":"84d56e1814b5895d34f0cfb0d6ed11b9a13f56aa8897ba5647d223a3d996f80c","sha512":"1a8bdf580b9ad2a51d33c33f2a06b6066200d2cf284eee9d68a839424ee77f5645eaeaf757c5c2b477161f1aa8ceb76cf76409f8d78347bc5eb9d75d68830a41","ssdeep":"","tlshash":"2c21dc0fd5009539416a8cf8e1696831a3b312eb03edd7b4c2ee5f754b91022c24eb6f","first_seen":"2025-10-23T21:23:43.905562Z","last_seen":"2025-10-23T21:23:43.905562Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/default.p4T8Rkj0.css","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/default.p4T8Rkj0.css HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=130fQvtvcvotkQjp; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=81nnFKjWWhoC5TuE; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-ed27\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 9269\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":60711,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (60710)","md5":"77afc64e20a33ee79a262b7502c48f1f","sha1":"4efd3c4e314ba7fcd323bc97a5ddae3bbdc6bedb","sha256":"d4f2972cfb2b23da29d5fbc8420c85c8a5baee8bbf872bbfe0665833febe2391","sha512":"f739525e72b55d118864e0f8a9173e0c8cd2be779c76f090535fece8989e2f07564d30c422865e2c080c403b8afba8dfbf8c5125b6f5bce8f7bcfc07fc4dbc0c","ssdeep":"1536:nxQPLOQpljLHUoUEfjFVy/2RxCKrvkYbHvkJDvkdl7k:nYrv5bHvWDvi+","tlshash":"f0537731b21d6038b53bc961b4c0568f2139f347d523dbaed9a93639c88b1d33b66789","first_seen":"2025-10-23T21:23:43.894168Z","last_seen":"2025-10-23T21:23:43.894168Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/BEJljnU5.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/BEJljnU5.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/CC-JJjPk.js\r\nCookie: __ddg8_=kXuItyf5t0D6HwUo; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FgUnx5TF4ZvFOU06; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nddg-cache-status: MISS,MISS\r\netag: W/\"68f899fd-6d638\"\r\nage: 0\r\ncontent-length: 129596\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":448056,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4f5cd1cc5d3bcfae663e6b31ed67507f","sha1":"41e50867bd471680ed8b46c618b030fa8d782484","sha256":"47e34e1335611aac998aedc0d97dc02fb36227fee57b00bba34f9647f67c83e8","sha512":"0d3d9dd36a5c1b8375bc0402140163bd76ac5b061d2b2371322f7ac99b7f5f4f0ca41fcd56a3a0108c0346a146dc4aeb9ff14d83f8e9bfa91ec6371f8d0875f3","ssdeep":"1536:NyG6S8kJgg7aPHkW4EFP2SF8QJCmSBynmI0IcIvBynmI0IcIWO/Og1JJBynmI0I1:N6xPHkMqKi1zQgpxHYV","tlshash":"1694c6e573a4a1e4e607fbfcc922b471715b35fb3b91cac466d04ea6bb1219c5c88c90","first_seen":"2025-10-23T21:23:43.908274Z","last_seen":"2025-10-23T21:23:43.908274Z","times_seen":1,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_ipx/f_webp,avif\u0026densities_1,2,3/img/home/100hp-mines.webp","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_ipx/f_webp,avif\u0026densities_1,2,3/img/home/100hp-mines.webp HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=eBAasD6kbyVXouU5; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jfYGmLoEoEF1R6iT; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ndate: Thu, 23 Oct 2025 21:22:25 GMT\r\ncontent-type: image/webp\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests;, default-src 'none'\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\ncache-control: max-age=60, public, s-maxage=60\r\netag: \"132a0-ZoF0YI5D/AFP/VuyovD9W7Nyv5w\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":78496,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2984x2060, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c6f029f85525ce74fdc27158bbcc9f29","sha1":"668174608e43fc014ffd5bb2a2f0fd5bb372bf9c","sha256":"be6bfff23afb528ef93365d27766fa7e58e71cec454e050e83bedff33d100364","sha512":"b1205bb36bb949f7ba7ceb04fbb7d93722632631e49ed96365523dce46e0d1c97aeeee542418f8291b56c950e607213090c06412e1a7c15e2e9c5a4a67dc31e1","ssdeep":"1536:lAa7AAAAAyrn6EYN/0TQTYDl5gMw1CCUq7Qe1Gm4QccRxEHcsF+loQ:lAa7AAAAAyDl5TQElECCN8esQccRU3bQ","tlshash":"367312ddd9037375641f38f00b4a924b14489a8152d09353d268e39e2fbacb9f2b3ad6","first_seen":"2025-08-09T06:39:58.968609Z","last_seen":"2026-03-01T21:47:53.47534Z","times_seen":34,"resource_available":false,"data":null}},"time_used":683,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":683,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/batch/","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"13.216.81.40","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:33.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 15 Dec 2024 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:07:A5:B7:4A:00:EA:45:09:50:EF:4B:44:63:83:38:E2:97:F8:13","sha256":"6D:1D:1C:48:82:61:EB:EF:E4:D8:57:9A:EA:F6:ED:0A:07:BB:6C:17:71:6F:A3:F1:88:57:DC:E3:A4:E8:44:96"}}},"request":{"raw":"OPTIONS /batch/ HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.gwcz87x.life/\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 21:22:33 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\naccess-control-allow-credentials: true\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: content-type\r\nx-envoy-upstream-service-time: 0\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T15:05:58.256156Z","times_seen":17565140,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/CFU304S8.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/CFU304S8.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/l9CMu1bs.js\r\nCookie: __ddg8_=3RwUFnpbxrXG4Xdr; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=KURehqsxN0q6NaLa; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-78\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 95\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":120,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"65b0cca89e40818f39fdd7753db6d142","sha1":"24e169a25a2e5e795d2ba4918ad600ab939bc23a","sha256":"261a0d9b3884cb4797de2dd31290199dbcec4f295a6ca9ee2c3b48ab9d9651ce","sha512":"e4c57b7230da955929c01aa05a22c6039a4ab395d6480587e21169106ce56e84aa99238c37d03c5944a72a6c799d55cc072ee59b5e498caf41fd1f6e021b43be","ssdeep":"","tlshash":"53b092d6728a3ce12602b810a15b80b4a131e6240b8a47208026f08739724a48a52e38","first_seen":"2024-12-07T17:14:43.577967Z","last_seen":"2026-07-25T00:01:50.12235Z","times_seen":101,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/ext/google/recaptcha/api.js?render=explicit","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /ext/google/recaptcha/api.js?render=explicit HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=QqdsWoFP84d8QVlo; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=6ZRgF6EcEkYPu1R6; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: br\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: private, max-age=300, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 23 Oct 2025 21:22:23 GMT, 0\r\nservice-worker-allowed: off\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1019,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1019), with no line terminators","md5":"004731ec95dd4895470921cf58b9b79d","sha1":"e7d8a5662c370e29757887709ad94bd35996e0da","sha256":"e4c7a803cb5e0e1e0999f06c9eb9a75cd9d3125177866a21b3901f3d96af774b","sha512":"fc0d4af1bb495c0d31eadf56221e89a4569b911393d15fd726424bc064e2a5c645258d41fe8ed2b764c1c3bca19ad67f7bc892bfc9d8676ccd29f8ad7c67ef1f","ssdeep":"","tlshash":"c61102771a14e0390b720ae1e2ffdab1f492742cf12c45d8e516dac81e6dcc7ce15589","first_seen":"2025-10-21T05:05:52.349088Z","last_seen":"2025-11-28T06:44:28.199412Z","times_seen":739,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/C2SIIdtl.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/C2SIIdtl.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/YlOf_41J.js\r\nCookie: __ddg8_=WTUXGcMiUqGqNkKS; __ddg10_=1761254547; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=k6Rni9NlJbjG0CCA; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-282\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":642,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (641)","md5":"bba40757951832c96963a81955901c44","sha1":"dd7946dab4bcfa3416e5a13e632eadded55d03fd","sha256":"54d88bf870b01094833c3073a1f5d95098dae90134083484ac1386419bbc7730","sha512":"fdd5c8150446fb5381af00a4f3fd8ccbb84232b1c07c08504091c42173d276eba8a769442926b6d94724a907a2e4733c3f0f36e1e279fe35a9bd78d78abe2e6a","ssdeep":"","tlshash":"96f099cab414de371683098e8023ba3512612d5c663032b096d382b248cb01de3adbad","first_seen":"2025-10-23T21:23:43.915265Z","last_seen":"2025-10-23T21:23:43.915265Z","times_seen":1,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/BQfqbuLg.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:28.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/BQfqbuLg.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/Razus-0y.js\r\nCookie: __ddg8_=gZzXlWf0aqCRTdgh; __ddg10_=1761254548; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=O2LlZ1ZBKpag6FJm; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg10_=1761254548; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-446\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1094,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1093)","md5":"b6226e11a82377ecf98197e965bc6925","sha1":"594c695e946d834bad3e501076ab7aed3c21259b","sha256":"cfd236def67319db3f88f9983521c023daf2bfdd07fa8ef2b15ad05aa5c5d5f9","sha512":"3634ca88c51f4aec95177edb75a938e2d0d4797f6d1e60a95af1944dd9935b048bb019efdc5a5306be52aedd90f066c3ad39c12adc25c58d27a804f8468dfd5b","ssdeep":"","tlshash":"cc11fc5fbc91c83d42b519b8d1703422036665c626fce4e405ed4eb51aaa44b9959b03","first_seen":"2025-10-23T21:23:43.918796Z","last_seen":"2025-10-23T21:23:43.918796Z","times_seen":1,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/ext/cdp-customer//v1/projects/233e4c5f9379d04ec864/settings","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /ext/cdp-customer//v1/projects/233e4c5f9379d04ec864/settings HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.gwcz87x.life/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=130fQvtvcvotkQjp; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=kXuItyf5t0D6HwUo; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nservice-worker-allowed: off\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":271,"size_decoded":0,"mime_type":"text/javascript","magic":"JSON text data","md5":"12c4ca482e1b7bf40375503843b5f997","sha1":"49d40faea70af1183b0ffb901b2a31da7df67e00","sha256":"3476d8f31024437417c5f09513e2917124968baedbe03b67e65610ab25bc6b11","sha512":"2ea63ebe73591d6db25a6ab54c245b29b4eed22ec8827abc39b4db69b79207dd04689cd6a9257ff94145ced2358ff3e66a31e8e6aa672805960387df8e5e4e26","ssdeep":"","tlshash":"6fd0c28c25701dfa88d16e798b9c5809b5cfd62d50a59b097574cd800dc08f82a246b4","first_seen":"2025-08-09T06:39:59.043609Z","last_seen":"2026-04-06T22:48:49.753298Z","times_seen":65,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/tPdbiW_V.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/tPdbiW_V.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/CC-JJjPk.js\r\nCookie: __ddg8_=kXuItyf5t0D6HwUo; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; __tld__=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=61Sq9Zyeg77CvLId; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 147\r\nddg-cache-status: HIT,MISS\r\netag: W/\"68f899fd-c0\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":192,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"af7805d42f0e94d87c24a603905aa544","sha1":"7b8e20de9b8033988fd4fb49ae5214be2a1b317e","sha256":"67962a43b72e5541bff19a54203273e73fa6a40aef2c34b20da51c95817d336f","sha512":"4f5b71fae1dbed1ca64d3290836d4ee5f28885ca526c71eaccbad91c58ee45a25d2a2e847846f68d8e02509d5c833f84c2e7a9928991b0418953cbe3dc954732","ssdeep":"","tlshash":"07c01285d8202077cc607828a1d20f42027e3644e115d17c77fc2482f470565a4aec65","first_seen":"2024-05-07T05:56:57Z","last_seen":"2026-01-21T08:18:56.877435Z","times_seen":55,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/24af37f89f48429eb57f315f3c5c80d7.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/PragmaticPlay/24af37f89f48429eb57f315f3c5c80d7.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 24882\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"36124c66609bcbfc658cab49ccbc43dc\"\r\nlast-modified: Mon, 06 Jan 2025 19:17:20 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18507262C754C38B\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 6261\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OedCW0e5W7ZL%2FDOBDKPpdn8o1kxzSbtuQUqgJ8fKxr4pmd0zxtwzfaDoeds60SxUBR2B3CISGVWBBF4Ctv6LZKr%2BHBBRKT80NjwgUrhC\"}]}\r\nCF-RAY: 993306aa8dd43c32-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":24882,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"36124c66609bcbfc658cab49ccbc43dc","sha1":"4807a48c9a26aafe18728e0f1de98976d140a8af","sha256":"1d7466243afcf48d42499b7d98371f760c1c69aa1dd108426e781d77dccc3616","sha512":"9a3d3c8b7e69d294e0052a5ef1c01c9a5f2d9c654f1820166f301c30c7c1a2ef892907234e4e365bca73fb8386218f03e6aecbe04f90d30110fbef5e0f4e1937","ssdeep":"768:7v7GRlxglB8sZUWu+kz5rEj0b4ZgQX/61R:uXxgA+orEj44/6j","tlshash":"69b2e1ded133afdf90c01e5d3fb0491181a6c75ee20b4a40590191a52ba24aaa79e77e","first_seen":"2025-03-21T05:40:09.009592Z","last_seen":"2026-07-12T17:41:43.816578Z","times_seen":43,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":239,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/images/cursor.png","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /images/cursor.png HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 591\r\nLast-Modified: Mon, 29 Sep 2025 21:14:19 GMT\r\nConnection: keep-alive\r\nETag: \"68daf6ab-24f\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":591,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 17 x 27, 8-bit/color RGBA, non-interlaced","md5":"4fa7bdcd138f8aee5178f0d4f926595b","sha1":"6d3a5103766e97395bebbd2ffe811b2e7ad3c7c0","sha256":"a1fb1b429d644ad011e6bd98701d1951138d3f973bda19ce3411e1c1d65ef35e","sha512":"81d75aeb19459f946924b46919bc1c4f447dfc0a0b56915ea19edfca282ea936c4b58a9d417459fa1b41982380200b3a894a8fda09faeab075556defcec883a3","ssdeep":"","tlshash":"fbf047cd4d715339af5e04d190f714a8fc45228a2460a51c4e0fd01a3d85055fe0d34f","first_seen":"2023-05-01T22:32:10Z","last_seen":"2026-07-26T15:38:30.81578Z","times_seen":2291,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/loading.gif","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/loading.gif HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=ZjxJBk6wrzOAHxNd; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=qo9AuJtjPSreMezn; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: image/gif\r\ncontent-length: 11144\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: \"68f899fd-2b88\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11144,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 64 x 64","md5":"e4d96bb51227829e536412e5392bdf74","sha1":"8bf350e63f7bc86615cdccc6d16e0c8abb00584a","sha256":"d2911698581f2b0f538c0d770d1b677ecad7b9e61e99d89d1f218f9dae6c31cd","sha512":"a580b7ee3f1a213a523cc8ac69662809cd21bf0952aa2767ea1c3a8ddf934a3a34c4c578d34525d54ab027915aa9097894545713f135126bb8cf7f280b8ab0e6","ssdeep":"192:Yx1zq53A3H8YLSfEdDNsS+4tygrQFFpslGsTg1z4cWl:MH38WdDNk4Ygkrmwj5Wl","tlshash":"5a326d2c1ca447e6e927463165dba2cb8811df2d226c18d39eac347fb95b23ee0dcd10","first_seen":"2024-12-10T17:19:34.10667Z","last_seen":"2026-01-21T08:18:56.850207Z","times_seen":57,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/eurostile-bold.CvV91m_H.woff","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/eurostile-bold.CvV91m_H.woff HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=Ns3gTHgj9bKaSgBE; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=C67x78jk4op0Se6r; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: font/woff\r\ncontent-length: 96804\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: \"68f899fd-17a24\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96804,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 96804, version 1.0","md5":"2e116fd896b19f31034b0dec4106d2e1","sha1":"530e6e27f2941307b1e26f260c3a4ccf855fbe7a","sha256":"428c1711732ee01fd5bbbf9d3a4a777a83414f1894f5399d77b22dd3bd50c523","sha512":"3eada120506cc1280dbb2e199acd4a386983f855771ca0e71bd2cb810d26ac50436165ff029c8c58e0506471675d5db59e7519781495e763fda70c1ee8fe9061","ssdeep":"1536:sBOXXEUF4boG1Y6VafRnAPwQIF+RqAW3z+57es+v39nzdEvF7y4TGRYhgil:WOHEUabN1YcalOIFMqZgCsI3dREW4Tr1","tlshash":"b4931220d9f1293570275f7e60deb491bb04ad5068e07ece2873cc569fede64b729920","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-03-01T21:47:53.474623Z","times_seen":56,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":90,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/games/casino/currentGames","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"OPTIONS /api/games/casino/currentGames HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://www.gwcz87x.life/\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=v4MS5zOfZVhLpjPM; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg1_=dB52xD91TpS6xAK4UTZa; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 7b9cfe82-fe51-4f2c-a5b7-276ee8585630\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T15:05:58.256156Z","times_seen":17565140,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/games/casino/statsGames?limit=4","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /api/games/casino/statsGames?limit=4 HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=6rbLEIQ93XHjeCJ6; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg1_=1UPGP6hZ0np8eDFDfHMY; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 85\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 6f41e4d9-ee77-4373-9c82-28279947464d\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5702,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"19f90bb54a2b390999a74c25e1c1fc5f","sha1":"d75a1d86ba1fc0f173c1b9e5029b10378ac1d552","sha256":"cf9bb0e0716495c025f64dd42ddafb33be0169a79c92caabea55fec957169b34","sha512":"81a6584bd49e0c0012ab29f43aaa9b4a1d474140c0f4ce69a8588694cd52602eca7820ea9266a14bde054f1bc8dcecdc0719d7eb56763a11e8cd2864e961661a","ssdeep":"96:qRKv7aglR9ZQAV+9zCKvjb9dR9ZQAJqIL9Bdb9CKvOM9qIL9BeebcficUOcy6cc:97f5Y9zxthoc9pxTUc9JcKc/cHcc","tlshash":"58c12411e98825fb0fe35bd8dd4bbee40ed9005751a4b56bf0f1d61830e21fa212aa37","first_seen":"2025-10-23T21:23:43.94073Z","last_seen":"2025-10-23T21:23:43.94073Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/onlyplay.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/onlyplay.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ONqVTZr5WnIY9MSN; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-133f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4927,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"012276e2cb9c3b370fd12c17771e6b5d","sha1":"5ed2db80f006ca50ff52b670d42cb06e6b2e5e55","sha256":"8cfe42bb41f96fe158e5d1d6765dfc1605ae47806a46ae96c4b9c7e2232c6e0a","sha512":"7f343af282052387bcee65cab1f74ac6e921ccdaf337120783aad5ce284ce00f8ee26de8412aabb563128086060194ecb5488ea602a2acb524c7b04d79426991","ssdeep":"96:K1FIFNEWh5Hy155cIiUHoL00uMcQThxc0K06lw2KC8qU:K1OFRKGUg0NQTYhlw2KCG","tlshash":"53a164b8b3e467d0e244e7e0e616d470304a3a723fddd2a087f57e47952902d45ac9e3","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.906023Z","times_seen":69,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/betting.DhScx3QB.css","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:28.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/betting.DhScx3QB.css HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=y5sHjN5M9S7JNuTJ; __ddg10_=1761254547; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=enkPUlLQ9y3wKmov; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg10_=1761254548; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-1b6\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":438,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (437)","md5":"ea616182e6587c1af9af934eb992896a","sha1":"cf29e611ba3d1c48c79da5dabe13449e89784e7f","sha256":"41bf4c8cd87f9eeffe240c86fe8fa8a1d695edddc61642ea07426c6374e460a3","sha512":"781f920b3d7468ed680df69a45030c74f48bd342d642143c6bc9733ac737a37da5b6f62c38c10ca50266cc034801c76609970872cab2c69ae87a6d605f2eacc6","ssdeep":"","tlshash":"7ff05541223ef23dc1bba01d9586c28e760ba203a21636f40e2ae45daecb8c57f210c0","first_seen":"2025-10-20T13:01:38.387149Z","last_seen":"2026-01-21T08:18:57.065432Z","times_seen":18,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/MFIvBQPaqIuMRBBwzEUrO3K9EiKcKHe1uHeTyQyh.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/MFIvBQPaqIuMRBBwzEUrO3K9EiKcKHe1uHeTyQyh.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/webp\r\nContent-Length: 101356\r\nConnection: keep-alive\r\nlast-modified: Tue, 08 Apr 2025 10:00:20 GMT\r\nx-rgw-object-type: Normal\r\netag: \"a196f6d3c320c1cf6c8ae3ae7ff8b112\"\r\nx-amz-request-id: tx00000ddd399e666eee427-006867c79b-162e91d4e-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":101356,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a196f6d3c320c1cf6c8ae3ae7ff8b112","sha1":"2e8c5758efc50e1e5e815d108b063e026f3db959","sha256":"fcf09059c6d39108ae64550c209602e895aedc03772dc7e1b66e7eaa9321458a","sha512":"e63f7fda240b007dac88ab159567c3747ed515f3d5ef135f8c10b20581db5cf40763eeb67002082e9238b23f039a7ea087c95b7ce20b6b1c399b22970d7ea770","ssdeep":"1536:4XQyhrzL/Juuu5E288uaUYc77LiWZU/MFcoeGYtZ+47EJTvh53aUQy70a:6Qyhcuum2maUYcuWZU/MCLr+qEr5Kb6v","tlshash":"cca302f4085f529ccac6badf48ea154670231844e79efbd0a26377b5054ee71bb93243","first_seen":"2025-08-09T06:39:58.91578Z","last_seen":"2026-03-01T21:47:53.512135Z","times_seen":32,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":119,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/l/v/init?action=init","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"POST /l/v/init?action=init HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.gwcz87x.life/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 204\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:26 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Webim-Version: 10.7.130\r\nAccess-Control-Allow-Origin: *\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1019,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"cdee631d5f071f61876517fd5471a8a9","sha1":"d98c7215440025a9f54bbf5a806721f0e0b0b090","sha256":"8c63b3f257ae8ec0237ffe20242d63d756ebc497bcf2e7b86c2ebbd15fe36794","sha512":"427ab92b164b5dd09218c2395e3773ae76bfb07e316b70bd13ab0420ede41839f86b80b71cac010060082a4cacd1049c04ab0631630e25a125acb2910d3624ef","ssdeep":"","tlshash":"e611ceb1e03804b756c1215f58b50683131df317ab4d2c55888c187473db9fa670ff61","first_seen":"2025-10-23T21:23:43.951338Z","last_seen":"2025-10-23T21:23:43.951338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":102,"dns":0,"connect":34,"send":0,"wait":43,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/CkugmCkk.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/CkugmCkk.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/CC-JJjPk.js\r\nCookie: __ddg8_=kXuItyf5t0D6HwUo; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=scZufoXzYZYSFkBk; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nddg-cache-status: MISS,MISS\r\netag: W/\"68f899fd-8e6b\"\r\nage: 2\r\ncontent-length: 9825\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36459,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26664)","md5":"a5b8324d4b4e76437aac9547676fedc3","sha1":"fd41e6d8573edfd64180bf7abb948c313d274d5a","sha256":"3ba31b688b8676a9f655c6ee181875de967ecd024fc2356b163bee0e17c2931b","sha512":"4d591e9d947d8a323b47d221b436aeb7bbcc0cdcc8a27ac0151391c262da8c19090b00516d16b7d8c8cce59ec72f452d7b2bd784f1290aa42c1eb42c98aebfdd","ssdeep":"768:DqTY+itM+orCjJJy1ee3JP6r1KCcKlyUW7YC6u64tH/9:ubiJou3CP6YhcW","tlshash":"39f21a487be0bc34c29a30d7353e09057b726641586f6600e009c6b97fa96ca71bef7e","first_seen":"2025-10-23T21:23:43.953015Z","last_seen":"2025-10-23T21:23:43.953015Z","times_seen":1,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":164,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_ipx/f_webp,avif\u0026densities_1,2,3/img/home/hacksaw-mines.webp","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_ipx/f_webp,avif\u0026densities_1,2,3/img/home/hacksaw-mines.webp HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=eBAasD6kbyVXouU5; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=VqwWUrZxo2Lpjoay; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ndate: Thu, 23 Oct 2025 21:22:25 GMT\r\ncontent-type: image/webp\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests;, default-src 'none'\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\ncache-control: max-age=60, public, s-maxage=60\r\netag: \"28f28-43zTH8ddKLOC8FO6fF2jBt7xGb4\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":167720,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"beaf795ddb57e557f9ef5bebe4a70e11","sha1":"e37cd31fc75d28b382f053ba7c5da306def119be","sha256":"72a11bf5c166c06de55683f827225a12649dc2ac5852f2a4f46838d285c3754f","sha512":"fdb558a4aa70d0db2670bde67cecb08f470f87e34d028cdcef2735e75916b89ad1124f56fb55abe9f92c21e6100363d9588ada6092941bda85173306d06ee22e","ssdeep":"3072:fNOoJ3KF5TvYdwVVDdMIhhl1tPGDnSU3sbYwPNjK8JJFjfCurdlJNd:73qTvlbRMIhJqSUqZXFjfxrjJb","tlshash":"4ef3122b1374ed91f3fd8a357bdbab46a3406d26cadd5722c270d409b8b71d88427d21","first_seen":"2025-08-09T06:39:59.030551Z","last_seen":"2026-03-01T21:47:53.238491Z","times_seen":29,"resource_available":false,"data":null}},"time_used":1007,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":948,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/games/casino/lastBets","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /api/games/casino/lastBets HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=IGgxCPeeYv6S2O0b; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg1_=eOnNZoAFd20uIPwUvptR; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 84\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 511865c7-2c07-4d39-bcce-806e5ccc8fb1\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1557,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ecb7bce14b146da51358171b710dd0c0","sha1":"4bf01d5176609602e8cdc0073398dd6a7721aa22","sha256":"95a6527bf50c0c5e02381c20c31a152aa1ce664e5d9c8221f14bb1246e1c09c5","sha512":"31962b2c334d671e7be8ec6eff770e1e38dac65f8c2628db05c39251ee4ad8c266a3d21c636de55ab0167455f284ea5753a30ce37e94ea51abf396b40668bc9f","ssdeep":"","tlshash":"f131e1deb56d089ec44846509e0f7fdc38dc262b214b8c5259abec3899408ef697033b","first_seen":"2025-10-23T21:23:43.961245Z","last_seen":"2025-10-23T21:23:43.961245Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/e5613466029bb58a5fa3a495c6b88683.png/y4ZVMMTXEkjOuluA3dtJMs804Xr0Yst0KHxdbaS5.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/e5613466029bb58a5fa3a495c6b88683.png/y4ZVMMTXEkjOuluA3dtJMs804Xr0Yst0KHxdbaS5.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 529511\r\nConnection: keep-alive\r\nlast-modified: Fri, 29 Aug 2025 08:46:15 GMT\r\nx-rgw-object-type: Normal\r\netag: \"13c1f821dc02d66947a8187d31250521\"\r\nx-amz-request-id: tx00000006d8365a9e52ded-0068b168d8-1724f0e13-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":529511,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"13c1f821dc02d66947a8187d31250521","sha1":"ed7373759cf7c703eab2688e645954a88240bf49","sha256":"7982c14d707434957082a71c213ef0f6c5ca711f19369120c850166fc996e8df","sha512":"082e4a7e8fde70e0b76fcfc95692d5249385f1a437823e1020c96d5980e08f1ccd15ddacfa863ef85d4b66cf36f83368115813c58de372120965175aad15770a","ssdeep":"12288:sStlnGaawikMIzI7/zQIrORozWDCrQdanifIW+ucX5mJWSgL4t:FjGaaHCIvLrORozWspnifUuOGWSgL4t","tlshash":"e4b42306acd7572a62cc692e21dd4c0f09ace134525aaf0fa299e9f2cff157e12c3754","first_seen":"2025-10-04T05:11:03.684142Z","last_seen":"2025-10-23T21:23:43.96408Z","times_seen":6,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":312,"dns":0,"connect":0,"send":0,"wait":30,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/hacksawgaming.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/hacksawgaming.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=hXF18PGVGfrG2uZa; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-18a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":394,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1189a31541a9827c632f4655e907a63f","sha1":"2514bf0ef8985e5ae82d1bd7229d42ddb95749a2","sha256":"5707ca19c71b77ed32be06c64d228c4e3848be28b7cf66313841dce2a9f4509c","sha512":"b9bfa0c9a1d559bf7f5ae01cd3c2d7bf2b9ab8c6f50bd67429c72d3587e3777c40d8568b07cf62232de112a2c7128f808b6ac99d872bf32347c9202f3a84b619","ssdeep":"","tlshash":"34e068b563fea580a30ca7305275a136dd62b4faf8e913b19cc22b02329518f8e5c189","first_seen":"2024-05-07T05:57:01Z","last_seen":"2026-04-15T02:03:05.963922Z","times_seen":68,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/lotto_instant_win.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/lotto_instant_win.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=P2No3qvhv0s8xe75; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-c49\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3145,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c6aa8bdbd5683a85dea4c14f70191e12","sha1":"a203945e31d63e787f3370eb8a8f047bb0ecadc5","sha256":"911c17212c19919c075e04a7169bafa59e69f4072e6580dfc3b8c545d0dd6e76","sha512":"aeac6e1780c3952e4ec433698e2cd7a1c93f81d76ac819e720835b874904b1e8be41c4b068e2bf31328b48daca8bb79f449c776a005b737b351f441d24e004ac","ssdeep":"","tlshash":"835172e993daa3e6e08df7b0c32b59b9325738f57920c56d47f4ac70ca5508cd48a9e0","first_seen":"2023-10-28T21:30:08Z","last_seen":"2025-12-16T06:29:49.425645Z","times_seen":26,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/B-__ut10.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/B-__ut10.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/l9CMu1bs.js\r\nCookie: __ddg8_=3RwUFnpbxrXG4Xdr; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9WhTCJzuupAjfylQ; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-82db\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 15190\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":33499,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32971)","md5":"6a6d443967d5558ae994d773af1043ff","sha1":"112b074c2bcbcf1a16fe5a1f1819ac4b0381f957","sha256":"43c8654d763c571af6e6864ea07a0f342d7fdfdaa5e500a67bf815574c6b96a8","sha512":"ea4fc99a9133aeb49fae403dbefa264abe46e85ef73e5234a60c2bfd330c0e85b9f6f430452c6ada9e6d49e67c3c9ff8e84e0fa5a3b511804d70b3d21eac5089","ssdeep":"768:qXU8MMca080Hjkh5UyvucDYxhROs9SewPpUzSsLP20+6a7kHGQPLFODM:TI088a5bvuc0xys9SeSpU1Lu0+67mQhN","tlshash":"48e2c6cc7641b018a3a71176e1ef580fb37a2984980e8554a0aef5e43d7c4bd43abddd","first_seen":"2025-10-23T21:23:43.968949Z","last_seen":"2025-10-23T21:23:43.968949Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DIbTYh-3.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/DIbTYh-3.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=xnOodYOWtzBVM52n; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T15:05:58.256156Z","times_seen":17565140,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/flags/?v=2\u0026config=true","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"13.216.81.40","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 15 Dec 2024 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:07:A5:B7:4A:00:EA:45:09:50:EF:4B:44:63:83:38:E2:97:F8:13","sha256":"6D:1D:1C:48:82:61:EB:EF:E4:D8:57:9A:EA:F6:ED:0A:07:BB:6C:17:71:6F:A3:F1:88:57:DC:E3:A4:E8:44:96"}}},"request":{"raw":"POST /flags/?v=2\u0026config=true HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.gwcz87x.life/\r\nContent-Type: application/json\r\nContent-Length: 228\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: application/json\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 2\r\ncontent-encoding: gzip\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":676,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b91ff32d3174a2bfd15d447c2f9e2c3f","sha1":"acfddeab2c7684f2dee6e89ba4043c6bac01f517","sha256":"89dd4136075da363b37898657c634693995136c00b55f06cbaa79138b60f3592","sha512":"c38b7ac77f6a82197c042968ae6695a93d2cc476e1254daf71e17c9f2c8532ce11dc920c24eb6a70944d9e4886e8b33266fbcd79b566d680916844c3ed3c1f19","ssdeep":"","tlshash":"ab01dd2ef560093d88149346d6d66c185ffa46263224bc6cf0ec449171db0c996f2e03","first_seen":"2025-10-23T21:23:43.97074Z","last_seen":"2025-10-23T21:23:43.97074Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/vip/mainPage/vip-logo.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/vip/mainPage/vip-logo.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=Ns3gTHgj9bKaSgBE; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=0Eg3Gy8rIj0jRRvt; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-135b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4955,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"15326d24a9c9c1179319a40491a77f20","sha1":"38d1265be366aa25f026d0401f349b1c33459ae2","sha256":"25705fa2dc626c00e80884d3f5169ad4f5ec2f9c6627a0e178747c2f1d78bcdd","sha512":"02b94b969ed3cbdbd99c262a3f8751a01e679e33bf0a844d63c595ae92d557e69a44cab9923f6073c8527d235d2cd1ab068f8bf111b6ea2bed89e28013ae3785","ssdeep":"96:LsShqhVJHu0qUm07P5dm32k+uBdG8h70e9zAzoiboIqlhxFp2jU62I:ISsx60/m32kBGxYzAzHqBFpmmI","tlshash":"e1a1baefb7759df4e885f3f8456500147a6728b738a0ca38c3a07fd9aa8529e9d44cc1","first_seen":"2025-08-09T06:39:59.041692Z","last_seen":"2026-03-01T21:47:53.355466Z","times_seen":39,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/footer/lvlx/logo.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/footer/lvlx/logo.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=Ns3gTHgj9bKaSgBE; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254543$j59$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0MzM3NiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=y8mcLihooYsACKeY; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-4a0\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1184,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"743489fa6132c79707cf67ab559d050c","sha1":"b1f7c69289033703f975043997715530210cc716","sha256":"bf3f8d2962026699f0229ca007322db9edd9ed366fe6770ef79c46276aeba886","sha512":"578e579d2a9806e1a6331644d4980185e0867dac3dd19136132e0fef3ef0b5ee8893889fbf922f7c8a40f089b4c19d4a0649567673dac7bd85c0203f21ffde6b","ssdeep":"","tlshash":"ed21078031995381640b47d4fe2b20345d57a0f7efcdf1fc16e14aa3a4d125658e4ed0","first_seen":"2025-08-09T06:39:59.124894Z","last_seen":"2026-04-15T02:03:05.831565Z","times_seen":46,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/pragmaticplay.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/pragmaticplay.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ML4y5YyNgpDxAyq5; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-770\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1904,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a7d8b662ed646fc3b9b3b18ffae282d","sha1":"b22756c8b2f9cf53a5b5b0f53265a2f3331edfe3","sha256":"698a39d7e57e623e036917ac7963c2ae6722fb9451db3f8a343ca2d3e3c1d497","sha512":"7d4fd6212a27ca260ea86a86cbd84b83ae1580aaa5db7349861b717ee16e6ecd4898cd3e4088a51d987d7ef093dfca18b06ec74fe301530266dc72125aad4422","ssdeep":"","tlshash":"1d4164c867ccc2a0c94a9bb71f19b46d56533cfa6f2188ade3b10a10751845ecc68dc9","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.828382Z","times_seen":68,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/images/file.svg","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /v/images/file.svg HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:26 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 9286\r\nLast-Modified: Mon, 29 Sep 2025 21:14:19 GMT\r\nConnection: keep-alive\r\nETag: \"68daf6ab-2446\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9286,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d6d4ad1349f997af8f4bc6e45fc6d2ed","sha1":"7908555e4ba3d3c73eba84266f800120c43270e5","sha256":"56d45428cf96355b298c7f5c023ab7c004583b2a136af450968c55e1486e2453","sha512":"1e011720c337271c89a7571cf2a460d07fc075c54311d2707768a43caadf966bf410349bb62eac2db6e729c48d0e290dbdf477d3a347ac3cdf4c1333cffeed3d","ssdeep":"192:C3ISknUnObdnWlZohOWCXQuSSnnnnnnnnnnzmEfPWsLb:gISkUxlgmZSKmLs","tlshash":"ef1209797706aa5a0b718f25e04191227d281c2fb37a57d0f48d5ec3b326c407d8adfa","first_seen":"2023-11-18T23:23:23Z","last_seen":"2026-07-26T15:38:30.842583Z","times_seen":1608,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":66,"dns":1,"connect":19,"send":0,"wait":19,"receive":1,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"licensing.gaming-curacao.com/validator/?lh=511aadd110f565d008810403b6cffb85\u0026template=tseal","fqdn":"licensing.gaming-curacao.com","domain":"gaming-curacao.com","tld":"com"},"ip":{"addr":"104.20.27.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaming-curacao.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 06:54:09 GMT","end":"Sun, 21 Dec 2025 07:52:39 GMT"},"fingerprint":{"sha1":"CB:C4:06:10:12:79:EF:B9:B1:55:67:30:75:91:9D:38:00:A1:7D:84","sha256":"C4:2A:11:7A:04:A8:58:3F:EA:C8:EE:C3:3F:CC:EA:68:AF:5E:C7:F0:57:F8:47:C4:A5:09:22:E3:23:64:C5:B0"}}},"request":{"raw":"GET /validator/?lh=511aadd110f565d008810403b6cffb85\u0026template=tseal HTTP/1.1\r\nHost: licensing.gaming-curacao.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: PHP/5.4.16\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: private\r\npragma: no-cache\r\nx-robots-tag: noindex\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pTdGPZ9f98fAORjr19OWUg4zjA0QxJKn2X6%2FErAL%2BAi8lfN4QWiZOwdcPgn6IzYqSBqKo5rKegU0ptFNfKQYdPl52S%2Bhv5haWVku0Pvj95Px67XCObNw2d%2FJ\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: PHPSESSID=7viktluov3ep2qa4pql0ip4el5; HttpOnly; Path=/\r\ncf-ray: 99344a25ca175691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:5.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T15:05:58.256156Z","times_seen":17565140,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":21,"dns":6,"connect":1,"send":0,"wait":468,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/ext/cdp-customer/v1/p","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"POST /ext/cdp-customer/v1/p HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.gwcz87x.life/\r\nContent-Type: text/plain\r\nContent-Length: 758\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=x0ohQsZGA4WHEphQ; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=K6IZDy1D950N8Ztg; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg10_=1761254544; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:24 GMT\r\ncontent-type: application/json\r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nservice-worker-allowed: off\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-07-27T14:50:59.673119Z","times_seen":178345,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":140,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/Block.3_c_wBH7.css","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/Block.3_c_wBH7.css HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=luX3385UxnY1waqu; __ddg10_=1761254547; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=rVnPFUtG3voKKIjC; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-1fc2\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8130,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8129)","md5":"4d0f5800f050834e7e686c835c1cf256","sha1":"b4c898909b08bbc3f4abb6e6443013e65578ada2","sha256":"332f8a0a04a2057e97709c7ac3b3e189c90104e0ce07676261c5d04f09d87c72","sha512":"dc2dfbb06776c572f0ceff3e7d2964b744887048757a515951ad453443ccf67608eb57a37e54ac4f3500a7148c78bd9f146400d7621d84a0911527207e898718","ssdeep":"96:Hu4OLKqI9JNKFk0KNKYD823/YuVNKw+HEfopNNKjjKwTZKjF+vMIpubqINGaplkB:5pqIg2YYD8eyw+HEonYj2k0jYvMKt","tlshash":"4df1fd21376ff4f8b23fcb37fa464a99202af313661382e9db115958e4cb192352674d","first_seen":"2025-10-20T13:01:38.452468Z","last_seen":"2025-12-16T06:29:49.46521Z","times_seen":13,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/ls-cdn.amplitude/analytics-browser-2.6.2-beta.0-min.js.gz","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /ls-cdn.amplitude/analytics-browser-2.6.2-beta.0-min.js.gz HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=9JLwK9np6ZhzGIme; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=hNLt7K9kXWt9vC6f; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Mar 2024 00:42:57 GMT\r\netag: W/\"7300cb5f3b4294338b104c0f3268002f\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nx-amz-version-id: IogUhwUfPmM04el12d60iABuuT4mFuey\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: AMS58-P6\r\nx-amz-cf-id: L7PkDFk4YG6WfqNvj2jNYs64BxTh8Gf8pCSsrLQ-oUMJ2Nruhv3Eqw==\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nvary: Accept-Encoding\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 17580\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":66596,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a81d9804ed47201de5314a7110e680be","sha1":"df58e208599843e46894e9c2bbfdf2feb2a985a5","sha256":"59dd69f4230f7535182747c17235fe4526d34826a142498485779bfdb5d617f1","sha512":"2c15805effa726a40e1b3156d003df4b5f602ab4c1b09b8897ff759d143c0a33a5eb7cc90887b850b1f209ccb05b7be263935ad805ad86383f88947d777fdb42","ssdeep":"768:p6wmsZPARRFO/J6zZsideR53I+dte7I4GWyihZurBJ8:/msY4/JceR54+zeU4GWyaZudq","tlshash":"f35372c9f6cbf0250393a5b8907f140ab33e7e9d242d4428f626d9d53c6d6499233bb9","first_seen":"2025-03-26T18:10:08.318249Z","last_seen":"2026-06-26T20:23:29.909592Z","times_seen":142,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/100hp_gaming.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/100hp_gaming.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=BkDiVDkAiKJZpwNT; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-452\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1106,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cd70424dc36bb569cf66dce4c48ddf08","sha1":"5de353a0d76d6e3d096725cddb4d1a1cc7beedff","sha256":"d6a57b6d6c010fdf34e6d5f98611e05fd346f3c43e05ef25033b93d112e8d741","sha512":"3cf334bb6677631e68e2ec6d78e96ae1840285168cf9b3824f562a5d73ab7e43dd460c259417054af2cccf35b06566f495b6ed35e41de753710c0a95210a64ef","ssdeep":"","tlshash":"b411c3c9709c5690dd8203115e5ebcfb40a274fecab15b897a14273f2899aaf0cb5ec4","first_seen":"2024-12-10T17:19:34.308667Z","last_seen":"2026-04-15T02:03:05.915174Z","times_seen":64,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/triplecherry.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/triplecherry.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=dQThZ2EOB15AbzbV; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-9cc2\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40130,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d7b72497a709d371c0b42510ecfac382","sha1":"70f19990d8e54831e33edaceacc0d521d3e4d366","sha256":"cc32bf72860f4cb7444d1cadff17a1fd31b1a09952c0a716bbff9d528a692227","sha512":"5eb32a62d1ead4b37c466f43f75d300e9083f532c25b9d8e2a514205901c491debbd94997d71553f7596734678dde7fb78d1475411d66d45de856c274d6b6a43","ssdeep":"768:hIx0XMOOxWinoJiBWSof+k4pTOLyE3U+tIXf63mpkg:hIx08JBnoJxDwTapU+SSOkg","tlshash":"6203e1b9de215ccdaa40e100927baf905e7a0ecb7ce497c8844d610fb5c9a9cca4edd5","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.940066Z","times_seen":76,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":130,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/SliderBlock.B3wtTtBU.css","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:27.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/SliderBlock.B3wtTtBU.css HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=x0UitSVpR8Zi2AfN; __ddg10_=1761254546; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=luX3385UxnY1waqu; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg10_=1761254547; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f899fd-9a0\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2464,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2463)","md5":"635b450980ec985e9dca2c76cb79c669","sha1":"b6021606da515caf47e8abf4a7989b5c50f973e8","sha256":"2c1263da32b4c80f084553254d0373c6d6cc111dc02aed38a5e7e16add47681e","sha512":"97f983e582acb44215ffe76d4d2c9b820f643cbcbf84f93841c4e61758340d39bcf2f30247461a9b72a064e550a2d64ef7146dd9e97d16aefe0edeccde0bdb9c","ssdeep":"","tlshash":"9351cb701a223cbb5621e75bae459caa70c8d96b5f13e1fbd148f024c2cbdb1dd16283","first_seen":"2025-08-09T06:39:58.865686Z","last_seen":"2026-01-21T08:18:56.964591Z","times_seen":31,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/js/pwa-load-event.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:20.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /js/pwa-load-event.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=9ZSoKAj7K7DPbray; __ddg10_=1761254540; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=hADhSQL664pN3hnB; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\n__ddg10_=1761254540; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:20 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nddg-cache-status: MISS,MISS\r\netag: W/\"68f899fd-177\"\r\nage: 0\r\ncontent-length: 211\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":375,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"f463b05f25296c1e185cc82087291f6e","sha1":"d15dfa009eaeeaaf36af83b20ace25714adbc583","sha256":"3f5bcf295bac81715b4413d640843ee19600f6a17c96503038c6a4193c331865","sha512":"5ecd0baa189383e24afadcbe391266fac63cdcdcb7da68ab1371168fae81f05f0140b4dcd86bc4cc59f4ebb3f5949e94b302f05de00942886fe3060436ae03bc","ssdeep":"","tlshash":"64e02b7483fc55b808e182b75f47bb15116721a77068d990c1871906f8d148780a2fd2","first_seen":"2024-08-19T15:07:41.99372Z","last_seen":"2026-04-15T02:03:05.836861Z","times_seen":94,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/BPw5Otx5.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/BPw5Otx5.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/_nuxt/l9CMu1bs.js\r\nCookie: __ddg8_=3RwUFnpbxrXG4Xdr; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=P1Gt8R3OJdyztAsC; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nddg-cache-status: HIT,MISS\r\netag: W/\"68f899fd-354\"\r\nage: 1\r\ncontent-length: 313\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":852,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (851)","md5":"ec0ab8b157592db48191b117c7b56fde","sha1":"9babaff5b55fadcb4844fc96edf0f8abc91a203e","sha256":"a061b643461304751a12dfa8d87ac8ff13dc5cfd684d51ee99df34fd7c4819f0","sha512":"c14cca5f9584dccc7ea7bc418eae38328bdf45d333529c294c9856641ef96cddc6ec471d3a70c5669c78d1eb00675e8aa07ccc33b043c805d62367056f6dbd4b","ssdeep":"","tlshash":"d9018ebc8704158dfe784fb55b1b7924c0252ddaffb409c6ca917501d38212feac8528","first_seen":"2024-05-07T05:56:56Z","last_seen":"2026-04-15T02:03:05.956604Z","times_seen":63,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/_nuxt/DrBHzM4U.js","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /_nuxt/DrBHzM4U.js HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=82yFQzxAXCtyCkhF; __ddg10_=1761254543; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9JLwK9np6ZhzGIme; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nddg-cache-status: MISS,MISS\r\netag: W/\"68f899fd-200\"\r\nage: 0\r\ncontent-length: 330\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":512,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (511)","md5":"81dc95a0ae7621ff9376cdd187ab5139","sha1":"6110c5ab1569e7654b8c15a010c9fcedf58021f0","sha256":"cb5b291c7af986c91e97a23bca15fdbdd5f22e4e195d3f6f2e01c07ae0b9a4c3","sha512":"a6304116d77607a747e3e142e404e06808491894cd86aa56a3da4766f8e36bf47b0ab64938ed7bafb707d3fd2f5aaf53bc8f397be35d055d9a221473762786eb","ssdeep":"","tlshash":"cdf09e8e70a3d2b0b736d789c937d542e07c1e93390de5d1d44a5a45324b481e73d75e","first_seen":"2025-10-23T21:23:43.001964Z","last_seen":"2025-10-23T21:23:43.001964Z","times_seen":1,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/5XokaAXXiNK1QR9zvTGT2iFyGhPzLhCTLgX30gis.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/5XokaAXXiNK1QR9zvTGT2iFyGhPzLhCTLgX30gis.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/webp\r\nContent-Length: 60832\r\nConnection: keep-alive\r\nlast-modified: Fri, 18 Apr 2025 08:17:39 GMT\r\nx-rgw-object-type: Normal\r\netag: \"22ebd198a416fa08ce852f109296cfe6\"\r\nx-amz-request-id: tx00000650e25ca736f3bef-00687f66c6-1687b1f97-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60832,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1380x736, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"22ebd198a416fa08ce852f109296cfe6","sha1":"bc10ea628a978f7a6762de4bf772744ad26cf6f9","sha256":"3a99d9e5b50d3a53a5450467b97bc8d128680363f447f0391469e4f8e09148b5","sha512":"8dfaf4f58bd7efb6e4f0339ca5e859282459b0f46ea207991e06f502c5b04a17a427886b84fb804cd660c5bf37992df9a1e6e2ad07cd64aa9322ba2d9ceb476d","ssdeep":"1536:N9sq27O+mfj2XMp0PpsusA24IGykJndju+jitZsmPv3:iyj2M2QElLjutln3","tlshash":"00530167e5a9570adfc0ebfa8b8d9b4f90f707a0409729aa21f4301182dec41e49d1f6","first_seen":"2025-09-09T11:33:29.108521Z","last_seen":"2026-03-01T21:47:53.298701Z","times_seen":26,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":151,"dns":0,"connect":0,"send":0,"wait":44,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/logo.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:22.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=FYKilhixwfVnd5Dy; __ddg10_=1761254542; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g0$t1761254542$j60$l0$h0; _ga=GA1.1.706386861.1761254543\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=f1sNMB4yoUizE2JX; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg10_=1761254542; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:20 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-5f5\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 728\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1525,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"90c2e8c0d206d5eaeac1b5660a865926","sha1":"fe0386bf75d653fbacf2638c0dfe63544acc878b","sha256":"68da6ba7e3c1d4c39c888f4cfef2e3090ae95b091ef2b0bc1e6b638a3f2e523d","sha512":"1912a93b523c285d3ea1da9831b45240b5a6e5ddaacb2922b9b35c346beca192b37ce9881b7120fd215d1ff7087b732df496026f5bb49ae424ea1c27a0433545","ssdeep":"","tlshash":"c0315ee2b3a9d38191080f00834e7864032f15e9a710818ddbd76ba579b526fcc3d8d0","first_seen":"2024-12-10T17:19:34.101377Z","last_seen":"2026-05-26T01:50:54.168263Z","times_seen":69,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwcz87x.life/api/middleware/mirror","fqdn":"gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:23.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"OPTIONS /api/middleware/mirror HTTP/1.1\r\nHost: gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,region\r\nReferer: https://www.gwcz87x.life/\r\nOrigin: https://www.gwcz87x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=T0qL1Z6QxuOQdrh0; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg10_=1761254543; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:23 GMT\n__ddg1_=orDayYiyPZNfrKJ3AivP; Domain=.gwcz87x.life; HttpOnly; Path=/; Expires=Fri, 23-Oct-2026 21:22:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://www.gwcz87x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type,region\r\naccess-control-max-age: 86400\r\nx-request-id: 5461cf42-6763-40fc-99de-c098259ab8e6\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T15:05:58.256156Z","times_seen":17565140,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/4818c6efe224ca00508b68206c7072ef.png/Uoz6Y4UqItavwAMZgwa8vgcq1pY1cbQ3dDfJQv2e.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:24.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/4818c6efe224ca00508b68206c7072ef.png/Uoz6Y4UqItavwAMZgwa8vgcq1pY1cbQ3dDfJQv2e.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 373555\r\nConnection: keep-alive\r\nlast-modified: Mon, 30 Jun 2025 18:30:43 GMT\r\nx-rgw-object-type: Normal\r\netag: \"87835f3d19ef24c456dd4c0b7894d1f4\"\r\nx-amz-request-id: tx000007108481b694ca6a2-006874b400-1664e693c-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":373555,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"87835f3d19ef24c456dd4c0b7894d1f4","sha1":"14cbdcaff8eaf86d4e8f26c265255036ed642b7e","sha256":"2d195884f567931a61cbaf838cca52847371c58132a31780bf89080a4ca28d60","sha512":"30316fa7c7f3790efb351fcb91cbc208f0824625058c307602642623322cebed37a4f6b6c484f53e643bba4ac0026b4bdc30622881b5457d5299f14f4033bea2","ssdeep":"6144:z+YTLKde07I0cUQZQ4DaPkPjDmpjpmUzn1fBKVWzWVpJoRqW6ls7aEFcAoKqUFWM:x4ecI0IDkkPjOpTr1fBSv4gKVFcuIM","tlshash":"c484235ab43810bcc8176b13e991eaed6aa0c836c545d72d8f4ae30b511ef6b0c5b35b","first_seen":"2025-08-09T06:39:58.980517Z","last_seen":"2026-02-25T19:06:54.224823Z","times_seen":31,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":156,"dns":59,"connect":54,"send":0,"wait":87,"receive":140,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/c9kQMZ2TyscdVQr9IZSbgAFW3rzH1Nv3T8a9tN1N.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:25.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/c9kQMZ2TyscdVQr9IZSbgAFW3rzH1Nv3T8a9tN1N.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Oct 2025 21:22:25 GMT\r\nContent-Type: image/webp\r\nContent-Length: 131374\r\nConnection: keep-alive\r\nlast-modified: Mon, 01 Sep 2025 09:36:55 GMT\r\nx-rgw-object-type: Normal\r\netag: \"6ce5d68117080738788ff1d8c8e58f63\"\r\nx-amz-request-id: tx00000b6b392a6b3f6a1de-0068b56b2d-1733360d4-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":131374,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2160x960, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6ce5d68117080738788ff1d8c8e58f63","sha1":"87ae69a0566354bc05565f44b636be6fa0d47d95","sha256":"bab843571b8e4c3af0a1f74f2452a291b28070cd2c0f2ad250910585c14e86ea","sha512":"e19d176b2c7c41ea7e9e8799750e5d3b14b367154e9653d42ca461f363717b6a8dda9454a7c7ed7241bb194f4aba762a48558443a300771451a7cb37c0edb152","ssdeep":"3072:ySS4FM+drB0mTdSxbO0EkBovkhQfrrPvu/YluByZL:ySfe+dV1qO0pmvZrD26L","tlshash":"e5d313dd237ac0b2b48e0759851f9dc970f7396aa6ebf81421b05c07ac9f3b541c963a","first_seen":"2025-09-09T11:33:29.097699Z","last_seen":"2025-12-29T21:49:40.447051Z","times_seen":21,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":145,"dns":0,"connect":0,"send":0,"wait":49,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwcz87x.life/img/providers/playson_premium.svg","fqdn":"www.gwcz87x.life","domain":"gwcz87x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwcz87x.life/","date":"2025-10-23T21:22:26.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwcz87x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 04:58:57 GMT","end":"Sat, 08 Nov 2025 04:58:56 GMT"},"fingerprint":{"sha1":"70:8C:1E:14:BB:02:2E:6C:A0:4B:BE:3C:09:37:43:F1:FC:34:2A:F4","sha256":"77:62:5F:76:78:C4:E6:38:20:47:59:16:D7:04:D3:0A:6D:75:F5:D4:23:53:89:8A:61:F9:C0:42:E7:AB:31:67"}}},"request":{"raw":"GET /img/providers/playson_premium.svg HTTP/1.1\r\nHost: www.gwcz87x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwcz87x.life/\r\nCookie: __ddg8_=VqwWUrZxo2Lpjoay; __ddg10_=1761254544; __ddg9_=91.90.42.154; __ddg1_=i9E5ZVGVoAiE1lA8US7X; i18n_redirected=en; userVersion=45.10.240.53; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.623911282.1761254542; _ga_VRDLWS0SHC=GS2.1.s1761254542$o1$g1$t1761254544$j58$l0$h0; _ga=GA1.1.706386861.1761254543; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIyMTAxNTcwNy1jMzM5LTRlZTYtOTExYi0wMGYzN2I0ZWQ5NDclMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzYxMjU0NTQzMzc1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc2MTI1NDU0NDYxMiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1761859343; ajs_anonymous_id=5ae1a79b-7319-4c03-9263-fb652f32aeb0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=nMJE4FAeTBdkuK1J; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg10_=1761254546; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\n__ddg9_=91.90.42.154; Domain=.gwcz87x.life; Path=/; Expires=Thu, 23-Oct-2025 21:42:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 23 Oct 2025 21:22:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Oct 2025 08:46:53 GMT\r\netag: W/\"68f899fd-4b6\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5c779d57bcec0fe4d42e108b4f34c15f","sha1":"40e4c6d78d1a92f13deee6ff8291df1a84c2de61","sha256":"6903bea0047248cef50e6c09312dcf1df8f26ef511c10fd4f22bb7c9c7580494","sha512":"51ec89c6412be1df2d784b1368a1797067e248946c29eb545d9914bc3884552ee0a7d9bb1834f4ec7ba1ccafde38ffce918d2dbc04a49d7aff1a52dcb357422b","ssdeep":"","tlshash":"392151ebf39da7d0ed048320c82dd97840a678be7f58a39d43d0ecb2e41a85e1c48c80","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.866029Z","times_seen":70,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
