{"report_id":"dc59d6a2-6e98-47ed-afea-5033c52f7410","version":6,"status":"done","tags":[],"date":"2025-10-04T22:06:00Z","url":{"schema":"http","addr":"gwch64x.life/","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":0,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"gwch64x.life/","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"title":"GET-X"},"submit":{"url":{"schema":"http","addr":"gwch64x.life/","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":0,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-08T22:06:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"ssogtx01.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"ssogtx01.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"gwch64x.life","ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-04T22:06:07.591409Z","last_seen":"2025-10-04T22:06:07.591409Z","alert_count":0,"request_count":212,"received_data":7481541,"sent_data":231159,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"getxavatars1.gtx-s3.pw","ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":0,"first_seen":"2025-08-09T06:39:48.642557Z","last_seen":"2025-10-04T05:10:43.218185Z","alert_count":0,"request_count":34,"received_data":7065235,"sent_data":16880,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"gis-static.gtx-s3.pw","ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":0,"first_seen":"2025-08-09T06:39:48.635715Z","last_seen":"2025-10-04T05:10:41.967002Z","alert_count":0,"request_count":24,"received_data":738540,"sent_data":11829,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.gwch64x.life","ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-04T22:06:07.596112Z","last_seen":"2025-10-04T22:06:07.596112Z","alert_count":0,"request_count":37,"received_data":144630,"sent_data":18883,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"gs.jdwqqi.site","ip":{"addr":"91.215.43.62","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2022-07-06","domain_rank":0,"first_seen":"2023-10-27T17:21:41Z","last_seen":"2025-10-04T05:10:42.679897Z","alert_count":0,"request_count":1,"received_data":759,"sent_data":593,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"licensing.gaming-curacao.com","ip":{"addr":"104.20.27.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-09-13","domain_rank":5874765,"first_seen":"2019-05-08T08:27:38Z","last_seen":"2025-10-04T05:10:42.640734Z","alert_count":0,"request_count":2,"received_data":759,"sent_data":1176,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:5.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-09-28T22:11:46.419999Z","alert_count":0,"request_count":2,"received_data":1642346,"sent_data":976,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ssogtx01.cc","ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2025-01-13","domain_rank":760426,"first_seen":"2025-03-26T02:25:04.976918Z","last_seen":"2025-10-04T05:10:42.19715Z","alert_count":2,"request_count":1,"received_data":405259,"sent_data":563,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"gx.webim.ru","ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"2006-09-29","domain_rank":0,"first_seen":"2024-01-26T10:34:55Z","last_seen":"2025-10-04T05:10:42.063227Z","alert_count":0,"request_count":16,"received_data":1918819,"sent_data":7383,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-09-28T22:11:46.355495Z","alert_count":0,"request_count":3,"received_data":1524,"sent_data":2620,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-09-28T22:11:36.689828Z","alert_count":0,"request_count":3,"received_data":761546,"sent_data":1429,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"us.i.posthog.com","ip":{"addr":"35.175.162.132","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2020-01-23","domain_rank":42193,"first_seen":"2024-02-22T12:48:36Z","last_seen":"2025-09-29T17:41:16.0715Z","alert_count":0,"request_count":4,"received_data":2464,"sent_data":2051,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gwch64x.life/ls-cdn.amplitude/plugin-session-replay-browser-1.4.0-min.js.gz","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c19b1b5d91c8d683b1310562d9c4a225","sha1":"4d45dcac5c6a88e10052f4e356b2170c20413441","sha256":"bb5779145f1ebdcdee053876a4ed060174dda4656978972304c79ddd5f36dac4","sha512":"3a4e8d2e8f5d9a3b45c08ce99374c149a5b67d04d016edfe6259dfbbba948a049301c0cfa5f9bf334cb93b9b4a3558cffa725c166a943c90834c8d2237a1a21c","ssdeep":"1536:Ask/3qTBpVX0Ib6vhb2pJkuppl5METErM2jnpkDtoT1JaM18PIQunrr9gltn2BE/:IqBfX046vhb2pKMQt1Jawi697w","tlshash":"4ec329deb397b033539355a980bb0101b73a6a19300d4464f62ad9ea3c7d847a277fbd","size":126923,"data":"","first_seen":"2025-08-09T06:39:58.991299Z","last_seen":"2026-03-24T13:49:06.781634Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/4v6vyIur.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"10c92c717f8762cb181545e7d2c6b331","sha1":"712d5130ad1deb5bae8e8e479a21d4908274dd34","sha256":"dfc421c8fbb78ff109f24399be0a334cbf47b3b407cf2bc5c31f50e2da4cd9a0","sha512":"34893e23627e8ef59a86fd8bec5618574feca8590438c4edd0f6f59efb2cfd25ed0b3bc334c2d4afe53e9e96f45ca65bb651f5ac475760cbcb269ac3a6c6eb23","ssdeep":"1536:QsrUHXu9+2FYnFjqN1q46HAXJF707AMvrHCRAxpdh5CVaJwBNI5tdJked5qK:QxHXuw2FYW2T5Sa1RdD","tlshash":"bed35f4b4e0c0e7a056217b12fada7b362acc07471dbc3e557bf82182375475aea279c","size":136604,"data":"","first_seen":"2025-10-04T05:11:03.528287Z","last_seen":"2025-10-07T18:16:30.112258Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/C7dbclZ-.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"95814635ccf28c50f7025b84ae665292","sha1":"8e7e49c92a940b1a223f5edffc0141d2eae81daf","sha256":"9a5cd10c23cdcfccc8d47bb126a9dad6ea543a55ac206a7126e60d4d69842962","sha512":"63952aaedcd202a8fe7a84815bbd88419337298120c012e558f936441376d532b8dd5c8cf97defe4c1afd5673bc89c62df73e4443c57f573c8e74a95d703070e","ssdeep":"","tlshash":"9021357d4aec2dcc491cbc842ad89d6c7504d249a191cc9638a6fee7f487d5aec48471","size":1111,"data":"","first_seen":"2025-10-04T05:11:03.592519Z","last_seen":"2025-10-07T18:16:30.123656Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/C28Ks5WD.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"226f97aae05b1bc8517bf6e8357b2035","sha1":"ec26d9e8486f92c5be054c7bbb23c607efc40016","sha256":"3a540feffb54425661775040e9d000fc91c8541e60a10d28b4916048e20d7c69","sha512":"a3f3fe091a35f13546658cfc513bdb66fc91a4fc90794d5ddfb88b64b6291a59029695134bac483280d8e88206b6497415122e156c68d87abd6a8324435c4057","ssdeep":"1536:7oDsoGxvPYALxa1k9CdeIusU1aCrhquwRpeQIvkn459rS90dBuwRp0r1GcJwdAfH:zZxvPY0L9sMawdAfGvM","tlshash":"03247daee38690fde12b8794a44b381431752ffea681cc8381fc5d0466268fc57ede65","size":214915,"data":"","first_seen":"2025-10-04T05:11:03.298502Z","last_seen":"2025-10-07T18:16:30.073415Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Bo795GQm.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"a223b34c3cdb6967c1095dc0a28a2b7c","sha1":"1959829472750c79c3b7cd33480ea6f383d6b9db","sha256":"5c8ee49059757cb7f107a35fcbff4e413488a00cd8068c8aad9e54cf53c91db6","sha512":"567feb951deb89ec211671f30b2ab5ca4c2b7c53faadb151ca813d5b6508a293037b5e4d794e0d49dc896fbe38b53cccca5caaed64f770b6b33e9e253f075956","ssdeep":"","tlshash":"2ed02bceeb7066b4bb10455d509bc752c728f90012a86ac1987b6ea13f109c6c346fe2","size":285,"data":"","first_seen":"2025-10-04T05:11:03.526688Z","last_seen":"2025-10-07T18:16:30.08633Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Bo795GQm.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"a223b34c3cdb6967c1095dc0a28a2b7c","sha1":"1959829472750c79c3b7cd33480ea6f383d6b9db","sha256":"5c8ee49059757cb7f107a35fcbff4e413488a00cd8068c8aad9e54cf53c91db6","sha512":"567feb951deb89ec211671f30b2ab5ca4c2b7c53faadb151ca813d5b6508a293037b5e4d794e0d49dc896fbe38b53cccca5caaed64f770b6b33e9e253f075956","ssdeep":"","tlshash":"2ed02bceeb7066b4bb10455d509bc752c728f90012a86ac1987b6ea13f109c6c346fe2","size":285,"data":"","first_seen":"2025-10-04T05:11:03.526688Z","last_seen":"2025-10-07T18:16:30.08633Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/b-vBzq2i.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"36c0c6b8ef144d7bf7caa7079c3a416a","sha1":"8dd20af034fdbf41e59ffbc3aa163434f7ee366a","sha256":"3680ac7d48ce5a8a0c9fde6d13412fb8edae11c7de9830872df097f8aedc5abf","sha512":"927260065160a49bff0120fc290821cc672903ea0d9135823628640c37dbd0e28581b0266cf1d189d1eb33fe85ae593c49035d3bb673b31857c5a49d2903913f","ssdeep":"","tlshash":"856141fc1635a57226eb17bb43620ca242764845f049b27010da8f0d592dc984bf3ffa","size":3347,"data":"","first_seen":"2025-10-04T05:11:03.465869Z","last_seen":"2025-10-07T18:16:30.055353Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/cryptojs-aes.min.js?v=1","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd93b7f0987a614bc17698503bcb6af9","sha1":"68a66448326499ff34c75bf31e2769b278584e0c","sha256":"8d4fae1a37a5b5338c889d0897b50024194b4d3ae94940e7e42c1c1423a1183e","sha512":"e3b87dfe10c0e3f3d801a85ae9c654a74eac22c2a93a757568a0d2b13755c36aeb5f9337e94a21db4ef2d1f0f1cfb98fccbbb0151d5cdf8d967730df96bfde98","ssdeep":"192:9BIGDmDm90mP9z8Ui015lN1I5rI2Tru6hMJFmHV+mdpwIfyAaYfKnNVYkUUFJZm3:9yiB0ez8UiIX1SrTegsEHJuI+y8Z7AX","tlshash":"625297c936edb94263963028587f6017b86b28b6945c4824f29cd4ddff9899dc03ae3c","size":13722,"data":"","first_seen":"2024-11-30T18:08:34.076577Z","last_seen":"2026-06-26T20:23:29.818692Z","times_seen":1206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DRLB4-_R.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"edbd750ef08a3e40bd3f93ef00424804","sha1":"2910560cc99b8e5fcf85488d82a39cdc3d45c09c","sha256":"19c614190f4a1ff133dd089486879e169ff387fc1dcddaf2177eb99e03b86f4f","sha512":"78fb844b4a23955443ad1a90c1ece096cf92e30a1b05a64a80d332774ad2063a4491e18a2a2afc1788c7762670f8638d1833868ff05f3775eeedec6acf4fd290","ssdeep":"","tlshash":"d5f0508b1caa18941de65f779027b1d2337a516e01518085feb1e6c4a10759ef32f430","size":513,"data":"","first_seen":"2025-10-04T05:11:03.352335Z","last_seen":"2025-10-07T18:16:30.062849Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f40956282de48d54afe03619e098768","sha1":"43d1a489ad2195c604bab8d857289e44b8068b4d","sha256":"4d19985445df15622f63a916964ecee88196fe654678c0b02540e5c85aa88129","sha512":"8c4769d2a900e98d01c00316f4d9bd2be5be1f7039d3a3ce6f0a7fdc0ae437ac358e8ade5e4dc240b9a2677745235110b922e97f531fa2d0de9c5be205c6d8a0","ssdeep":"","tlshash":"f951d979e0286a3fa016198c74053340584c9f3f60ee3d58d4c6dba4bc1b35f2ab17ad","size":2629,"data":"","first_seen":"2025-10-04T05:11:03.692691Z","last_seen":"2025-10-07T18:16:30.147802Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/jXgXeeQE.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f84804da82d9c4cb7ddd9e71f0ca1f6b","sha1":"64c4e19b9eb6ea410c08dd63881ddd0cb318255d","sha256":"2c0d1951397683fbd5db45458698ddee96bc097d1c27017de3493bd092d4b841","sha512":"87c74f73697be0716dfc5d1a33ef2f121591b1c214a1e4e2ad5c778f0817a36c52fe0bbd776c8abbe36532eb8182a1be5d688e4a9103748744a2718d4b51e618","ssdeep":"6144:cCuayegAufVcvTgOg1msMr0Ouyfo8x326pl5OaPydoMbUCzxNeuGgSBm5uz:cCuayegAufVcvTgOg1msMr0Ouyfo8x3p","tlshash":"bf247e320e5d1cbd1111a166de1cab1a38de81fe3e9b93e107796e6e35f10309ea931d","size":217183,"data":"","first_seen":"2025-10-04T05:11:03.708279Z","last_seen":"2025-10-07T18:16:30.087249Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DUaaTVgP.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"b7ffa89853e25cdd374f1b1b43dd9270","sha1":"0b818c53ddb47cfdfb2744f8885a52580139ce3d","sha256":"606f1e6bf95874e266928a81253820b7d84c7b825e49df2383961e32897c6b6f","sha512":"31973f15fc25c05ac174b2eeadf1f7a2a110fd9ef2df8c4a2dca421e8e3d51da6a7eaf1f8192f0f0e97e899d82d2eb17e80a74fe3a323f80c7b7ea632e3b1370","ssdeep":"","tlshash":"703144c9f29ce4b7d0e7d7e88472802076d875fb3fe8dbd5824099715623096764ead0","size":1671,"data":"","first_seen":"2025-10-04T05:11:03.445851Z","last_seen":"2025-10-07T18:16:30.060895Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/BbqPNdSU.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"d41b27ae63a30ec5d67cd47eabe3049e","sha1":"d1c10551d8dc1c36a70afbd414a0536cf64bc8b5","sha256":"d15f6a0302235ea1ec65d60e9c153f9edaf3344ac40599380885512fe83dea5c","sha512":"44f9246dede1ff1a1665f88dd0042c43ecefd28cf64dc01d4b34d60c88b6fa95255cf0185582c3c23a88f8edd54fb01d8e47576c7aca101ebc167b8de3f2b05f","ssdeep":"192:tXiFojMIZjkItgj6pnaJe/HA9iReMDjHMtpgCtAoRXSAd55rD1W55Jr0UWip8W4a:xiCMIZjy0LhYRHMAhPMN07i6jC","tlshash":"1c0240de520a64b00bd706fa81e846d0d6b00844f04d997c64f8dddf477ec8917a6bbe","size":8647,"data":"","first_seen":"2025-10-04T05:11:03.58126Z","last_seen":"2025-10-07T18:16:30.056453Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/se0nEqBJ.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"45b84c2348d774f82d8c590b4fd62b61","sha1":"4cfe5c94be3b912aa45239c0ec16bbaf18e7d144","sha256":"d2aef44d67affd4beae60ae1146555d727c47a39613078bfd3282ac6cf7a03dc","sha512":"a2d49407527b6f3dc77cdcde891b7be568b9c4024690683281b20cf17b76d0ba7788574d7bcd1d04a18a025956984b11a70bea7262c899288ce06ed28c8df8fa","ssdeep":"","tlshash":"f431320c380960bb239253e094de044ee258bd617a6bc4c5e2cc7d677d27599dc8efad","size":1539,"data":"","first_seen":"2025-10-04T05:11:03.407247Z","last_seen":"2025-10-07T18:16:30.088067Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DzVxT-JT.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"56b248e4197f0aa4ff0bf9e1a5b45b46","sha1":"fd106eaaf3c02a1a9fd4885d893bd1970db2897e","sha256":"636935d6e62f931bc653ce0b948508d6b13dd6967c2b278ebc0cf8e81016773b","sha512":"cba0682b45dea2fdd1828dbc2d87bc1caa950b6f1a3837281662cf896660c76c8c5560bd9f60302bf997691a60509971c61b5cdf8d7d307ee589da79f2fd3133","ssdeep":"768:4qTY+itM+orCjJJy1ee3JP6r1KCcKlyUW7YC6u64tH/9:jbiJou3CP6YhcW","tlshash":"a6f21a487be0bc34c29a30d7353e09057b726641586f6600e009c6b97fa968a71bef7e","size":36459,"data":"","first_seen":"2025-10-04T05:11:03.531109Z","last_seen":"2025-10-07T18:16:30.074352Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CjIjlGq-.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"8536f2f542c30c3b37aa68fa9d57f5cb","sha1":"4679e0eb2b374266ccf64bfc73ac98dad5143a1d","sha256":"84a0b743a7ef37e6cd2a2db660b4b5899c3fecce9d1f28502709614fc9d191fa","sha512":"126dd430ac683507fae1c2a1e11c5ff94a9015441798342ca77791fe29709b30c33f8b30ff1b10b1f08b51fac27d016fed4b2f8e724afb82dd8b57c2fbc7fbfd","ssdeep":"768:kC43aMGeQtDCPB/HyzE0qct7yxP2C7dSlSxkPut06BcftOashQWEhQEq/iiB8faZ:760xiywcV64IX","tlshash":"e303f8c8b2a0506583e2a1a390750203f33999153409855cbb2ceefbad7eeda7177f75","size":40164,"data":"","first_seen":"2025-08-19T01:32:32.322521Z","last_seen":"2026-04-26T08:04:42.226428Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/h_1x8YBl.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"479927b2e5ced4c72111060e612a8101","sha1":"8e0446ead528e4a22e7ae415cf8a33a827bf4328","sha256":"83aa9202c9fa72b8f8f5db84b29fb79e8314823450c10a599a5115cbf895e6a0","sha512":"51a6f2d081f5f1a3d91b597440da964d0f17725fc7653122cc1601b3b069d62d1090d3c5d0a165f44a62a16720b76da580a27f5b9ccf0a95e6e1bd33dcbd317f","ssdeep":"","tlshash":"64f0ddcef414df33268309ce4023aa3512913d5c663032b096d382b148cb01de3acbad","size":642,"data":"","first_seen":"2025-10-04T05:11:03.398279Z","last_seen":"2025-10-04T22:06:20.867269Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/ls-cdn.amplitude/plugin-session-replay-browser-1.4.0-min.js.gz","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c19b1b5d91c8d683b1310562d9c4a225","sha1":"4d45dcac5c6a88e10052f4e356b2170c20413441","sha256":"bb5779145f1ebdcdee053876a4ed060174dda4656978972304c79ddd5f36dac4","sha512":"3a4e8d2e8f5d9a3b45c08ce99374c149a5b67d04d016edfe6259dfbbba948a049301c0cfa5f9bf334cb93b9b4a3558cffa725c166a943c90834c8d2237a1a21c","ssdeep":"1536:Ask/3qTBpVX0Ib6vhb2pJkuppl5METErM2jnpkDtoT1JaM18PIQunrr9gltn2BE/:IqBfX046vhb2pKMQt1Jawi697w","tlshash":"4ec329deb397b033539355a980bb0101b73a6a19300d4464f62ad9ea3c7d847a277fbd","size":126923,"data":"","first_seen":"2025-08-09T06:39:58.991299Z","last_seen":"2026-03-24T13:49:06.781634Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/js/fp2.min.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","size":34877,"data":"","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/4rtQVv8W.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"fee98e2133557b5174d80c41eb5ebc14","sha1":"bed9b980ec37764ad8100634005e005bc18a0798","sha256":"a69a8cdcdd23f4eccbff43ca93c4524fa6285410da77b6d14b7177e900a25ba1","sha512":"410b0aae21ddb19ae205427032d36117ac8053b36f1bc355b00b316ad1db1710e1b556d9b4c1a66c0f7f8f60031588d62ce11338615f75ac0872fb28c1d52165","ssdeep":"","tlshash":"77d02b5d503290741176055908db0d06d147a4b9332552246562aa752698592464ae06","size":259,"data":"","first_seen":"2025-10-04T05:11:03.22978Z","last_seen":"2025-10-07T18:16:30.111211Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Cn9yliqE.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"19d5b85492f4d8505bb0d3df174e9e2e","sha1":"84b6548697aa030be332309225e873884d9f3dba","sha256":"79ce7f24d8f2fe12521d0d2ab3e1f77deec6ed8d84313c24f6b0e471532776a6","sha512":"0be04f2ec94f2b25a681d6dd3e61486c30aabe678dd82d01a56bd4a6d9fa45faae911209c277356941b283d09658258d66ebd35497c800c064db73ea06177e1c","ssdeep":"1536:kzGEyMiW9myjPH+UTrFuRSmicJ9HZBynmI0+iAFBynmI0+iA5zAGg1JxBynmI0+3:ktHPH+HFQttb40vzx8","tlshash":"6794b9e1f3a8a1ece017e7fcce26a471351a35fb3b91c5c44294ae749e221ac9d5dc81","size":446775,"data":"","first_seen":"2025-10-04T05:11:03.35039Z","last_seen":"2025-10-07T18:16:30.139568Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/B8md4mkO.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"13e52a860b7c9f0d3fa795af7b74e9ce","sha1":"7accab38b5a9d32cef5ccb294827c720dd57bc96","sha256":"c954534311f02c985beefb3b61e175ff796fc2c409a276767621ae913223fe2e","sha512":"47c79c65612ee02dd4eb85aa72519eb624de625c42d37bde7f3fe3833e9f4a07138a092facc0285e662e7027524712d1773ba386a387476425b3acec55059289","ssdeep":"","tlshash":"95f0a94fd89182b9d259ecf4c4349265167626bb93eaeba4c5ce0b34a300030d196bab","size":455,"data":"","first_seen":"2025-10-04T05:11:03.678368Z","last_seen":"2025-10-04T22:06:20.911675Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CLbd04ce.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"d101cdb72b544b9decbee1aa42f440c4","sha1":"a9a6a583b81a15a6c3c4d2ba85b236a48d3bc329","sha256":"aa791d76bdbffec99264e16e5f2f9b713c76c4b702cf53e4abd143f92afe6906","sha512":"b03ecaa8429376a8b9851b8184429bd925bb5eb4493cae3c0868a1379e001388864cf0a39636f97b392691a86a295638bff3a1cecea6688de916e5a183c76996","ssdeep":"","tlshash":"4b41cf0e9586d164eafb0051a51c0681625caa9ee474085df2fce7effb1c87d7b0da70","size":2247,"data":"","first_seen":"2025-10-04T05:11:03.363227Z","last_seen":"2025-10-04T22:06:20.951658Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DJ_iQnf_.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"60746f400a9a3d3f10edefe5e53dea72","sha1":"c47361cd97fb2b8c4b15ad08488c1d7a8cf9d12a","sha256":"6794e50df61bcf4fbecd3f2683c7d332e918b156735afd1dfd7a51284b133441","sha512":"7823406b483508f36f23d081881fdec7a2ac5f68d34a4aafb2a9c20769c3cb84220e4c22589a0d9e7c5f4b7176d906281313022b0c21ab2bda116794a0da910d","ssdeep":"","tlshash":"ee61a60fe80550a9063174e8a218a5987b7c1fede2941841a3b5dff70b97c69b238a96","size":3449,"data":"","first_seen":"2025-10-04T05:11:03.546852Z","last_seen":"2025-10-04T22:06:20.923864Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/BqzaD3Pl.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"48659d4240295b9e64caab349266ed60","sha1":"72d8336e72ca76db1563fac1c496ded6ff65ae3c","sha256":"127ea5b1a4a77e85a4a100e7f9301b32e1e607a2c9b3b9f714def75e098b0ab1","sha512":"4ad1491e8175e0c642a3032062dd6e2ebb251ba4c1b94e4192e4fa50688cfbf6b748d45c0433bf36af924f90c65f4bb9e35267929b16482411800a5346042745","ssdeep":"","tlshash":"e8f0c92eb1dab43543ccd8c441380c006861ad602c0e218ed19b9f13b1d07a3708bd30","size":510,"data":"","first_seen":"2025-09-04T16:11:26.386239Z","last_seen":"2026-04-12T00:18:50.830483Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"887608b0c0b2891a47072d963237b8e9","sha1":"41b527c20cc6385a63737fa99b0f880a0342beb2","sha256":"82ed39aeecfed78b79d68a2975a729d8224b1ca171b4123b783f12a6d9204bd7","sha512":"9b5f7b8a968bd792e4d2f411928f7f11dc8cd1e4c3cd4f9733ddb03892787f621e8d1263caed68ca7a909a07659b57ebb47730a78eec432815df4c60e4417857","ssdeep":"","tlshash":"1221fe35b54bdc6409ce347e851f230be4740a49da21b19096f0fe8128b8ab52582a1a","size":1214,"data":"","first_seen":"2025-10-04T22:06:21.038615Z","last_seen":"2025-10-04T22:06:21.038615Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/6tKjJg_B.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"407d393e15281264692188900eae8eff","sha1":"b830cf3642c39e0c6ef0ded45f8382ac840abdc7","sha256":"56d692019d86bb87b3afe063495db3d18f6706930335f5e240addb0133581a46","sha512":"2bc25c395ce1143628b18f39f869d5472fdb7165b844babca7735cadaec667efaa1d141b51554a15c93ac6e0f4b304e772748837c2b8ee76dc034375713ae708","ssdeep":"","tlshash":"2a817779b123a8f5a211c36f9e044da239cf0dfe5a55f076e0f4a480a3e6c74da4d312","size":3880,"data":"","first_seen":"2025-10-04T05:11:03.310242Z","last_seen":"2025-10-04T22:06:20.999565Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Dacnxtee.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"320ec157fca2c96c27d5b58c11f14b89","sha1":"e0e5dcfb335de172aab5aaab6508452391e5c3f1","sha256":"afd2b3f48c1cce3897968123d1242e363126ef7fcfa9cb926362b79efcc7d4c5","sha512":"83a0fdbfc245ffe78730b87d76e85b4111d45fca04b25835a6cd24961857e9f68ff3bc21519d21ca8561d0acc704396c2144ca92393e78030ea6048c559c3794","ssdeep":"","tlshash":"a3a0120a0450007d208608e4675b509955e0142613b55a8100004a0106154de650cc00","size":86,"data":"","first_seen":"2025-10-04T05:11:03.670272Z","last_seen":"2025-10-07T18:16:30.094419Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DUaaTVgP.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"b7ffa89853e25cdd374f1b1b43dd9270","sha1":"0b818c53ddb47cfdfb2744f8885a52580139ce3d","sha256":"606f1e6bf95874e266928a81253820b7d84c7b825e49df2383961e32897c6b6f","sha512":"31973f15fc25c05ac174b2eeadf1f7a2a110fd9ef2df8c4a2dca421e8e3d51da6a7eaf1f8192f0f0e97e899d82d2eb17e80a74fe3a323f80c7b7ea632e3b1370","ssdeep":"","tlshash":"703144c9f29ce4b7d0e7d7e88472802076d875fb3fe8dbd5824099715623096764ead0","size":1671,"data":"","first_seen":"2025-10-04T05:11:03.445851Z","last_seen":"2025-10-07T18:16:30.060895Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/ext/cdp-customer/v1/analytics-js/snippet/233e4c5f9379d04ec864/analytics.min.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"009ba376452e3bdba0f98538c0575d44","sha1":"7fc6cb65590b122da408e8206cbebe360498ffed","sha256":"c31bef488aa8dee63ffe8601ea74d02285c0e9f189ff5540a94637b3a0fe99d9","sha512":"925ed13622d0b785921820f1b52ab0ad19ad44b8467ec1e15dfb03c9327dbd16ef037e1f11f9fdf80cbc4d9104c08a62c02b4651786efad4547aa5dc11dfe89b","ssdeep":"768:0xOyftQBCLo1sw/cexpme6piT5nQk8v2RbgFoF4OnImsSfWdLyWQL9ZsBpi0vRxv:UtQBQo1sAIeaE5Qk8uV4oF4OvpU5xMMf","tlshash":"d6a383c8f6e6f060439364b8803f110bf23e795e680e84a4f266d9d66cbc59d9127f79","size":106254,"data":"","first_seen":"2025-09-05T15:12:16.336085Z","last_seen":"2025-11-07T14:36:24.450735Z","times_seen":219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CkMSVCQx.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"79068909446126a70dccef2e4c2a06cf","sha1":"3f1f59ca79626ad920c3f2ce34109d2d06ca1b7f","sha256":"8214d22013513fb9a76d56a5723c9ecbaf725ebb9beff448232c77e30a459faf","sha512":"437b07be547ebde1a4dac1fdcfbdc3521519d219b964b3e1cb959bbf76c98f5165fc8af5ed54a44cb436d8b827326c03020820e0dd888540088fc28351669c12","ssdeep":"6144:EW2i6XYOhfa7HN9OCjhpr9SPXiBfmECS4Teq2YvnqX1SnI7mbvnQGcRjsXKAiH2i:ZXkhS7DO+hprP9mxS4VTqlSnKG6wXKF","tlshash":"6ea45ad97196b02213f619e4807b0106f3392a54384ec4e8f16d9eeb3d7690a92b7f7d","size":483068,"data":"","first_seen":"2025-10-04T05:11:03.286196Z","last_seen":"2025-10-07T18:16:30.070847Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CYqDhD_K.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"1bbfaa6ac14a0d4a4f6a2bdb50403740","sha1":"da1db6943edc34407d541bf0999bebae565a73bf","sha256":"75a2ab6b9337408f843fde1e6ecf53fab99814a48dc12f1744621095a45bc852","sha512":"585e1e94ae1be8697cb4217da30bc9a3c01726a9e4ff4664f8a888ea03fa639d8a97d603f95684fc8f37b006f0ca6b67619a74114c7924cfb1d8a1646781c6e2","ssdeep":"384:gbLmDw0GjHIVo6eR6o1Shl449OsLV5jbHQ6NhWWxZ9HqDXRoOkm4Zes:gPmDw0MHIVo64X1NdshJTQ63WUG4h","tlshash":"479295c832c7f5968793197681bf100bb23e6d85a40d8892d53ae0d87c7486c867bfed","size":19331,"data":"","first_seen":"2025-10-04T05:11:03.43668Z","last_seen":"2025-10-07T18:16:30.136146Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CcFtdMxu.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"538ce0330b2ced9c093d8be1671d340e","sha1":"d459df6255b9e94c10f9b2babdae4c28f8bf3b16","sha256":"ecb0cb590d0277294f4e65d21d40be8ff5315de56faabf0859184ad8719167f4","sha512":"98045e91b5681bd8752e01283514a64c451bb47e3a9d85ae35995444d7c01b7f764f8009be06c0898e95d56faa9db5942589fb8b2a5c73ce5704c650b8edbc5e","ssdeep":"","tlshash":"6c016d8e647b65ec49a577403dd84ca45b91bfe5269351813e2c6cc08bd4c85b53903d","size":748,"data":"","first_seen":"2025-10-04T05:11:03.657849Z","last_seen":"2025-10-04T22:06:20.835779Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/js/pwa-load-event.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f463b05f25296c1e185cc82087291f6e","sha1":"d15dfa009eaeeaaf36af83b20ace25714adbc583","sha256":"3f5bcf295bac81715b4413d640843ee19600f6a17c96503038c6a4193c331865","sha512":"5ecd0baa189383e24afadcbe391266fac63cdcdcb7da68ab1371168fae81f05f0140b4dcd86bc4cc59f4ebb3f5949e94b302f05de00942886fe3060436ae03bc","ssdeep":"","tlshash":"64e02b7483fc55b808e182b75f47bb15116721a77068d990c1871906f8d148780a2fd2","size":375,"data":"","first_seen":"2024-08-19T15:07:41.99372Z","last_seen":"2026-04-15T02:03:05.836861Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Chd1ThOZ.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"317a2201ef3851dba19e8b41380c8518","sha1":"69f8afc7452ae5bbffe308672417d74ea784cee0","sha256":"64cbae9ec71c97c3ca661b3a42c7f0de57972f702378830b7911e5a148b1cb0b","sha512":"4d8e02b904019b8bc965749301e7a14aa67543e54a8b2a19862be134620f94b55e7a2481c50590bf05fc5b7f6ce8e54746b77e238fa7b3a83fbaf81345be42c0","ssdeep":"","tlshash":"372130aebb3aa7bc7c245a5f42306f30f0132096ffb8945cb8d22126e3425a155640b8","size":1151,"data":"","first_seen":"2024-06-08T05:57:25Z","last_seen":"2026-05-26T01:50:53.816934Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Bk3Jmydq.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"6052c7f84404b88299065ae89596b637","sha1":"e71bdbacb60eed02d960d6a5369fe5c23a1ac3e3","sha256":"688a86e03c476d460e3661f53a1e65b9a61894c1bb136a9b53275b1eeea01811","sha512":"6eb207949e4a1c2150f1f5875544402853cc6234b5c1183806fc09c367a57b6aeefd1b12bc080539160066f1c2b2ffdc08488e69973cf4fb79ad8b2a0c214ea8","ssdeep":"192:9cioNBART9rJ8zUGmZsWF+az025j/Txw/sO5DwZln:9ciooRlJ8HmZsWF+az025cDun","tlshash":"8ed10a4ff4444479d3b248e9a44969c393220bea624090f3913cdc3a3718e69675dfea","size":6301,"data":"","first_seen":"2025-10-04T05:11:03.314319Z","last_seen":"2025-10-04T22:06:20.781433Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CC6fv1Rh.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"9d0572c9a74518ff7384918546fc258a","sha1":"a4382d14dcdb2c139fa26f7012b26ac1fcb9c955","sha256":"481143b49f435c974ef85f6f99945fac1b6c6f98153c0cec1fe444e327a70344","sha512":"8c2eb8060b030c03c79d19bb6a5ef30088f30599098e08dbdb5b350008cde05692f04b43ee95b3b0729f7aa8a0b15cd9d6d52e5abdbb9119e78e8f2a7fbd8d52","ssdeep":"","tlshash":"102102afa135003f8e89353985486859cf464f1ab0ff8546b83e9d6aa3041c6dc7cf29","size":1259,"data":"","first_seen":"2025-10-04T05:11:03.262596Z","last_seen":"2025-10-04T22:06:20.902901Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CkMSVCQx.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"79068909446126a70dccef2e4c2a06cf","sha1":"3f1f59ca79626ad920c3f2ce34109d2d06ca1b7f","sha256":"8214d22013513fb9a76d56a5723c9ecbaf725ebb9beff448232c77e30a459faf","sha512":"437b07be547ebde1a4dac1fdcfbdc3521519d219b964b3e1cb959bbf76c98f5165fc8af5ed54a44cb436d8b827326c03020820e0dd888540088fc28351669c12","ssdeep":"6144:EW2i6XYOhfa7HN9OCjhpr9SPXiBfmECS4Teq2YvnqX1SnI7mbvnQGcRjsXKAiH2i:ZXkhS7DO+hprP9mxS4VTqlSnKG6wXKF","tlshash":"6ea45ad97196b02213f619e4807b0106f3392a54384ec4e8f16d9eeb3d7690a92b7f7d","size":483068,"data":"","first_seen":"2025-10-04T05:11:03.286196Z","last_seen":"2025-10-07T18:16:30.070847Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/w_DUq-AR.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"4c6bce4ff408842b72be9810227b096a","sha1":"905b7ba6378ad365efc082783bc72ba90e804a34","sha256":"e8f8fa31e74b47742d52f5f9aebbd3220463ea110c472a0bf6d1bc44e4ea2d7a","sha512":"b2f00a387d36eb615467a74c0679c2fedac31af75325f6add5028027e538b0b419612738c6839d82cdc92a97c478d3a7da6657ccfa994d5a43fc7e8e67259bac","ssdeep":"1536:XK6l28I8DZzkXhvPS5uLEiMAa73hBlxvHB+CIdzkVXiA6w+EV93mBE09:66nCvPS5uZS8a9Q","tlshash":"c7832989f224b57782f75aca8376c20172a54984b809d4e4b0ed4d7b496e95c03afffc","size":86097,"data":"","first_seen":"2025-10-04T05:11:03.612073Z","last_seen":"2025-10-07T18:16:30.104994Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DXFcmPY7.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"f35775ff648ec6716f2a297601310e96","sha1":"7305e85cbb919d8b85f3a5930e3f296b5e6fa785","sha256":"4511ce05d79359267133ee9e7e89fe59be13436a70679dacdf294e07de1bdc6d","sha512":"c81450c578ff1a8ef035a1d56429dd637b3533bde838720faf99a48ee0d1805b8f24567ecb757ca921606067907d517d04226b17383e91d3a37c4fce563a34f5","ssdeep":"192:XqsxSEFu6ZufGq++k5q2IkZQ+tOWwYpsTctY0ipgNE7oVKRpnKFEN:XhZ8fK+kQ2IkDLwYpfYZplOKRpnv","tlshash":"c212e9e473ac72aa59630dd12475481de434e6243b26f4d1f2ba38bab497c44b273f2d","size":9180,"data":"","first_seen":"2025-10-04T05:11:03.241006Z","last_seen":"2025-10-07T18:16:30.134044Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KN757LMM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"01ef3cf42fabf5d6ef0376c8e8c5ff40","sha1":"893fddbcb533c9bea894ea564f1db55b1a8cd32b","sha256":"55ca58ec3e3b3b66b5cc13a1f9558ee4df75e4da160014ccb21d8c52e067f6e8","sha512":"baf35c96cdb505d8b87f58d784e9c11945464e26cf1e42f9ac45b0dd417a171af981d73a66d3c3654d52356ccd77dc3bf1efcf7adcd9b1b9af4dd2b123c7a5aa","ssdeep":"3072:LRb4bfV2o5qOTaksP0GIOU3Ty9durXx9COvCVK4N6znVg9dihva0ZUiMLXX3AAmB:lyLTlDyYvRCV9dIi1LXX3AAmozKEXwJ","tlshash":"ba8419cdb3c674664393a478903f014ba1bb69a2f44cd895f185dce42db4aaa4237f7c","size":385898,"data":"","first_seen":"2025-10-04T22:06:20.981157Z","last_seen":"2025-10-04T22:06:20.981157Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/ext/cdp-customer//v1/analytics-js/inAppPlugin.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b3f92234d8907a103ec9dc2b05589f1","sha1":"2f2c0961bace40551cc39d1728715b94ec82db2e","sha256":"ae91906abf85a449f6ec41c31f1bc77b9bd3505bb7e55d61760b47c3fb11e3dd","sha512":"62174308a9634879afda50af1511adf6af4081ae78910db5c71cc0bb764cfb2c287c659d8653268b4b1eba7e6eb76b7b8096c1416a28b069f19e38019a7d38a2","ssdeep":"96:frYe+t6Sgb0qKEIwRGBMtIPmcKhgbUk6HEHvRrVxEC7NTjQCtGf8J4HJDFqK/+bD:Nd7KOwBMtgLgHE7T864KKqKk","tlshash":"3cb1ec9df793f82c05f39a7de5773423923a3b026099e411e057cec2596838d6123bb9","size":5580,"data":"","first_seen":"2025-09-25T08:21:12.736151Z","last_seen":"2025-12-15T01:19:11.275667Z","times_seen":356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DXY8KlFG.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"01f853759ae111c06ef073d1cf06f478","sha1":"d0ca8cc9b2cefb9a8cdeedca60eafe91bed7d4e9","sha256":"7c41de0c8c2c275357d4378ab0dd2686e2e9b0f0c2de6af137d5551daaae2ca5","sha512":"1882700c6d14d6732e1f0defedd3b4b678d141d427680109ad069bb738c30771b557b90e20a5c681ab41c9bffb1f8e6a0a75446fd11b97cbdf10ad59530236c0","ssdeep":"192:bJUITj4C++k9G2qKeYhKJ2qrMBHTxOcfsobj:bJUI69wYsJgBHTwcEi","tlshash":"9502ea8ada554d38bdbb1de028fd4206313d2fbb91c4cc1369f85e289f44ee55a2536c","size":8518,"data":"","first_seen":"2025-10-04T05:11:03.412248Z","last_seen":"2025-10-04T22:06:20.877933Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/4rtQVv8W.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"fee98e2133557b5174d80c41eb5ebc14","sha1":"bed9b980ec37764ad8100634005e005bc18a0798","sha256":"a69a8cdcdd23f4eccbff43ca93c4524fa6285410da77b6d14b7177e900a25ba1","sha512":"410b0aae21ddb19ae205427032d36117ac8053b36f1bc355b00b316ad1db1710e1b556d9b4c1a66c0f7f8f60031588d62ce11338615f75ac0872fb28c1d52165","ssdeep":"","tlshash":"77d02b5d503290741176055908db0d06d147a4b9332552246562aa752698592464ae06","size":259,"data":"","first_seen":"2025-10-04T05:11:03.22978Z","last_seen":"2025-10-07T18:16:30.111211Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DlAUqK2U.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","size":91,"data":"","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-08-15T10:17:47.208535Z","times_seen":25525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/zVFskexI.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"5ea5cccdf7fe73c144e70d799815d49a","sha1":"81bb06b30d93384c5161e2b6f8071ae99233346c","sha256":"ff9b0b00de6e591e7358f950969ab47c64969182cc7735d0f953a7fe2d85a70f","sha512":"48ae4ccbf48d353d4436238f7163e488638ee29f4049ba15a4ca4258a89a4609afb9d9563b4cdc56d88e7cb1d6e45c1d915309015410d38f6f716a35ddb961d2","ssdeep":"96:/SI0Lgam5pFjwsmyzqVBRJzxv7A28/s1/HEwYx+3cCL:/8mjsyGRFThSu/j4U","tlshash":"0fa1858f1240762e7ded4b5543f4681883304886fc1c27edf4ae5d389b5a88f61bb674","size":4910,"data":"","first_seen":"2025-10-04T05:11:03.358433Z","last_seen":"2025-10-07T18:16:30.125287Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/api/visitor/v1/configs/default?jsonp=true","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"638d060432ecb93780d761ece2001dbb","sha1":"497f80e2de439a0b5260eb9448cdfb7f5195829b","sha256":"8a2680517eb60dd29259f47c0cce83bbb653cd5330ac747b055836e4578974cb","sha512":"b05c7c566357807d136f35df56d69d9cdf8f1b4e3dace8ca3b4c3981cf8fb5bde098bc0076680aea6792dd8547ad14c6e5c6be969f660fa02b5a490b8c1a52ed","ssdeep":"96:mXzMOTx4alggVgY+/Syo6ygym/WYH9XOc4U+4s/cQtW6CVgpcf:k1OVY+KH6Lt/WYHccwUQw6CX","tlshash":"a1b141b1d126003b16c56a56ed396a8f277492d2e740ef3e8f1c0817f38dab562437e2","size":5566,"data":"","first_seen":"2025-10-04T18:13:14.581015Z","last_seen":"2025-10-09T10:23:07.378313Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/cryptojs-aes-format.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6bc38f77922eaa6f1b23716034b4a2e","sha1":"db781b1e30c4f2a1d63d47054f0903c463cf01ab","sha256":"9ca00bddae85e30d59672da0089ea5e132df97d75a92f42114fe1befbaeaf32d","sha512":"0ad7c00c1564d77f8463dfc81003c0d6cd6ada4e3d01094331f72847f17718e4a6b2c7a2a0bcbd96a1107bc6cb9bcb1721e7b2968ae4544595ab98d39bb30c82","ssdeep":"","tlshash":"163177407debb4c287e8e1d50435a044f67b7a0ab1558ef3aa5aa404ffedf3006326e4","size":1494,"data":"","first_seen":"2023-03-07T18:27:54Z","last_seen":"2026-08-07T16:57:51.090464Z","times_seen":717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DxTym_EP.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"a86bd43371591230ada5d1456dab8aa0","sha1":"b63e835649ce8bec3af500a596a7a1f58272afb2","sha256":"23ec8c94b2d36cce2ca68ad1e07e75f81b886d3d0077acde44ee2f5981e3ca10","sha512":"c2f22c55f07b8c50d90c20493fc7dc2b4ed68615b8adca2c23cbb0c8439285544b86a623e919ed65f23f8dd6202d553dab85551ce8953e3e9c963b24ff059899","ssdeep":"96:oeyq53hKMoKMj1W3FdeF31f5HnPx1oRstVCBR4Ir8Dtgjiby+qUECPRv5:o83BY1W3eFFvmQVCkIgJbtD","tlshash":"f5b1a7e4b1d9e09bb7b64fd1c032225260076ba57434f0d0f27aad73215be54a562b3f","size":5164,"data":"","first_seen":"2025-10-04T05:11:03.300471Z","last_seen":"2025-10-07T18:16:30.054069Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"befcadacfd8ec351662c75fd286066c1","sha1":"8815e025630f3556791be45e4b18e68a0afe8aa6","sha256":"d13de159094f4acdcf60f2c1e55273cda3a046633d5fe0419a23a823257db4f9","sha512":"e1eed9edde97cb38ddb01b65ec9cb597eef4574a32c30c61d89abcd397180014f30e497175f2bef4928e2f0ac68a86b7c2e65811dfda34a9b82ef9035a220f0c","ssdeep":"","tlshash":"d8516586f36598212adb38bda73f1246663217e20d5098f2b2319f457c187cbc526b4d","size":2588,"data":"","first_seen":"2025-10-04T22:06:21.039846Z","last_seen":"2025-10-04T22:06:21.039846Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"aeff9e54461107d5aff2a8a3ab6d1d49","sha1":"7c572c02a581c069082fdbd9fafe28077a472986","sha256":"bb02f61ae8f39649f033dee6c2f1a0be2b09ed9ae5d6a817f7f6c6ab66e85209","sha512":"917b934d79637813cfd6a744135aca9cd2f18d0099245cd96638bf240ac832b51d99356e6bc932c07aa6298e026ffa1943bb5d95c179831976103b8c650561df","ssdeep":"","tlshash":"97516586f32598212adb38bda73f1246663217e20d5198f2b2319f417c187cbc527b4d","size":2588,"data":"","first_seen":"2025-10-04T22:06:21.040996Z","last_seen":"2025-10-04T22:06:21.040996Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/C7dbclZ-.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"95814635ccf28c50f7025b84ae665292","sha1":"8e7e49c92a940b1a223f5edffc0141d2eae81daf","sha256":"9a5cd10c23cdcfccc8d47bb126a9dad6ea543a55ac206a7126e60d4d69842962","sha512":"63952aaedcd202a8fe7a84815bbd88419337298120c012e558f936441376d532b8dd5c8cf97defe4c1afd5673bc89c62df73e4443c57f573c8e74a95d703070e","ssdeep":"","tlshash":"9021357d4aec2dcc491cbc842ad89d6c7504d249a191cc9638a6fee7f487d5aec48471","size":1111,"data":"","first_seen":"2025-10-04T05:11:03.592519Z","last_seen":"2025-10-07T18:16:30.123656Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/w_DUq-AR.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"4c6bce4ff408842b72be9810227b096a","sha1":"905b7ba6378ad365efc082783bc72ba90e804a34","sha256":"e8f8fa31e74b47742d52f5f9aebbd3220463ea110c472a0bf6d1bc44e4ea2d7a","sha512":"b2f00a387d36eb615467a74c0679c2fedac31af75325f6add5028027e538b0b419612738c6839d82cdc92a97c478d3a7da6657ccfa994d5a43fc7e8e67259bac","ssdeep":"1536:XK6l28I8DZzkXhvPS5uLEiMAa73hBlxvHB+CIdzkVXiA6w+EV93mBE09:66nCvPS5uZS8a9Q","tlshash":"c7832989f224b57782f75aca8376c20172a54984b809d4e4b0ed4d7b496e95c03afffc","size":86097,"data":"","first_seen":"2025-10-04T05:11:03.612073Z","last_seen":"2025-10-07T18:16:30.104994Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"243dcbbab1864ae304323accde3f63e0","sha1":"7ac807de29469c5e810042601c8a11bf3601b893","sha256":"43ebc8eaf80b1efe8dd36390371da196ac1ee2ce30e3210b583a7adf20335fda","sha512":"2d9905ef903fe79fb3c24a2c552599dfaab246622edd7dc9348fd4d593e0351166cbbf59d306849c6601839c6198884f1fc600ae9e0728ea7f26cc363c58343a","ssdeep":"","tlshash":"d8a011802022a8030aa8800c022bbb003a38abb0a280022082308208300a023280a388","size":77,"data":"","first_seen":"2025-10-04T05:11:03.69028Z","last_seen":"2026-02-04T12:10:15.553292Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/ext/cdp-customer//v1/analytics-js/646.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c83e6df6ffa3af6337495fadc058adf3","sha1":"1bb413dd66d4e85907de4414bb98fd17be6ae482","sha256":"d128bb0eda8faaee8ff9b04a261ad0e835dfe1631768aa39c1a54952261d5787","sha512":"7ed7358de7f6d30a0c529a75c1fe9b1e6e79b34f8753538873c0c517dd28c52e423abeb772c0be518d344f2f513f3ff1c7b5b511aa99645b7596f4edb7771749","ssdeep":"768:i4V72U1y21F6WiEyKS3K/70fjjtRBlWBqnNyV18u8/zo8NyB5CJ:i41yGviEy+0vtnNyV18u8/zMO","tlshash":"bbc2f94a316a393d83d351e7bd7a3006633b7555b849c041b2ade8872f294cf6273f9a","size":26551,"data":"","first_seen":"2025-09-25T08:21:12.740421Z","last_seen":"2025-11-07T14:36:24.349236Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/C79gAr2S.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"17c723dfaa3649a1f25d74af9303519f","sha1":"d9c6a1617a8f7f0397ed03b857617d9617f2b47c","sha256":"409766bb52c4bc3ab1d2ec902db3b1515bc01798c546809b70ba784878d3fab3","sha512":"3fa4fbf36a8510ca7a54e39529aea90b799cef995992c65b83542a5e05e72b4f35b1299142cc8f9e7f953910d8a955aeb20722ffc9e03b62a820f652ed825b92","ssdeep":"","tlshash":"a321238f1598dff8a2cd5de84d3211155ad50dfdb2ed98c7c2091a6917b002ae1aa723","size":1183,"data":"","first_seen":"2025-10-04T05:11:03.283232Z","last_seen":"2025-10-04T22:06:20.825711Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Br1FBsO3.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"767f58379d7921f95c8dc6c600a3df03","sha1":"13505dd414f4a7979cc3098535dd88e1e1ce193e","sha256":"fa877f9e586ac8365282757cb02e92b352649b7ee3f6cb33eb0026bb4f1c95e9","sha512":"57b4279a8e6d24ffa4bd77e6812666ea155eca8cb4fc3c1de0b42259393b937babb44298e1a70c2910ef36fbfc356c2e4aa32b36583304980a9e2f2fb98062f9","ssdeep":"","tlshash":"9611ce2bfa4a1b6263331c7646a931e6cf650b8b2c7994c43c54df261237c83e5a6f54","size":1029,"data":"","first_seen":"2025-10-04T05:11:03.632172Z","last_seen":"2025-10-07T18:16:30.14286Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/ext/cdp-customer/v1/analytics-js/snippet/233e4c5f9379d04ec864/analytics.min.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"009ba376452e3bdba0f98538c0575d44","sha1":"7fc6cb65590b122da408e8206cbebe360498ffed","sha256":"c31bef488aa8dee63ffe8601ea74d02285c0e9f189ff5540a94637b3a0fe99d9","sha512":"925ed13622d0b785921820f1b52ab0ad19ad44b8467ec1e15dfb03c9327dbd16ef037e1f11f9fdf80cbc4d9104c08a62c02b4651786efad4547aa5dc11dfe89b","ssdeep":"768:0xOyftQBCLo1sw/cexpme6piT5nQk8v2RbgFoF4OnImsSfWdLyWQL9ZsBpi0vRxv:UtQBQo1sAIeaE5Qk8uV4oF4OvpU5xMMf","tlshash":"d6a383c8f6e6f060439364b8803f110bf23e795e680e84a4f266d9d66cbc59d9127f79","size":106254,"data":"","first_seen":"2025-09-05T15:12:16.336085Z","last_seen":"2025-11-07T14:36:24.450735Z","times_seen":219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/C145BBQ-.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"333b4734051445b3fdf1d0fd82e46e1c","sha1":"cdff10d1f25d68ae952f461c687ba44efe5a93b2","sha256":"d5f4fcda16e2bc61f9061799461d4e8f175106601a7cc1b2fd53494e0ea5cb4f","sha512":"1374fed8cadaea823dde70a4101e73c40dacdb9e3f76e2732b4a1ecfeed8759c93f2dd4520d1b4a1a67fe95e70b2c45b8af381f54de0a5ddae1f193264eb214d","ssdeep":"","tlshash":"b811fccf80d488f8a04d8ef88d31585906e81abaa3fda486c29c0a6552b2029e189327","size":1096,"data":"","first_seen":"2025-10-04T05:11:03.36469Z","last_seen":"2025-10-04T22:06:20.788718Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CFzQcB0L.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"e03518ae3241e6dd395a063ba226f056","sha1":"ce8d73c397d5dc7ee93d3f441458d108201216c3","sha256":"5d716e4a24b41b70d9761f4ae2cc82b40a9e511e6cc6b8928bf37c1d61fc6ef6","sha512":"3de9e95ab046329789ed32f1404e4461988c1ce6bc41d1740d7c73cf1a87f4b802920111f593f14038981c80deb5d91190e6de0ba5f867f5b2a7d6b1062d6c60","ssdeep":"","tlshash":"3b11344e90351e9dd06ccfba806af38330609dbb2713e0597919d1a43eda4034d28f32","size":926,"data":"","first_seen":"2025-10-04T05:11:03.43181Z","last_seen":"2025-10-07T18:16:30.089715Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/TaNftZks.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"b3207d6a426c185b2a7c5287a16b3b54","sha1":"ef943c31a4709da3cb206379185f4a9298596fc1","sha256":"e5961afbf67e5c460e4a76fbab2ea44d2c538589da9053ecf5ddcb80bd9f16ad","sha512":"6459689b5cdc1c610512d2f364f44c886d41e88ea43170f86b80d8c876b31bb8af2ffa391565414c9827d27b907f8c96fbb043ba29325403b4f764686892c940","ssdeep":"768:ouDRAWjwR2qMm7t58Om4uSyMUWLucH4YrjjiYHNzlchq15lDVtkIfrH5J1Le6VjT:o7eDmpiSyMUWLucH4YrTlcWRf7HuK0de","tlshash":"00f2d709e4199c3ed9b78dd878541402722d2fdfd0804d72a2fc9e155bbbd78229eb6c","size":36888,"data":"","first_seen":"2025-10-04T05:11:03.548498Z","last_seen":"2025-10-07T18:16:30.09333Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/C72coOWc.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3bc6cd8453440a2112d76ab82bf7bfd","sha1":"af19e1d374dc436237a39c274cc7162326a03096","sha256":"d2f31fedab9f60c9f48cc734c847add5835557c2d4aacbccc3d1ed8794562a8f","sha512":"7f68ed63cfcda6c55de267e2e26029838317ccf504652ff4c2659492711864100aa52eb5722688d7d6a65efef4897edf1bb6a1d9c8e4cbdf225971f1b8ac00f4","ssdeep":"","tlshash":"ec21fe4fd000d03941aa8df8e069a92163b352ef03e9d6b5d2ee0e750b80025c14db1b","size":1390,"data":"","first_seen":"2025-10-04T05:11:03.629959Z","last_seen":"2025-10-07T18:16:30.085382Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/js/button.js","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"587e13c24d17141fecff62e86a00ffc4","sha1":"b67c345ddb508d91f6aeb774a086db22cef92530","sha256":"b18d676e74a1991942986057293a33b529fe3b5bad23ba68c06667d67a1d225a","sha512":"8c61210e82be9f7e0581456056d8592a8c4f15cd5a361e5c37f57308d367406b80487b99a2c26a4530eb777f8ba43f7a5ea584d7bfdbaf710527871be5ececec","ssdeep":"24576:/o36wXnnOqCNTKi983ht1x2vRfXjXjryWsz9tQ:/o36wXnnOqCNTKe83ht1xYdTjryWshtQ","tlshash":"e2155c897644353a82dba2bf702b170976379552a444d46cf878e8d4bfb4d09823bfbc","size":899155,"data":"","first_seen":"2025-09-20T02:53:52.592022Z","last_seen":"2026-01-19T12:14:51.147852Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/WmOt8kDh.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0d5b56935a1c83ae13d43f179dcf983","sha1":"7aae7190f0678918bb4bc9a63477574da131da3f","sha256":"f18df94a2909a1fcfe5919f070b080a001ad8892089a8011296f95bd6c4381dd","sha512":"db3174cbda9f638887081c8e2b22992b6edfea44c265c250b2e742e850ad175854d90718fed5a3da022ccd641e2abb471797cafddb84e2eb6b21cc2b9241888b","ssdeep":"1536:UUG5TbxDYbVIFD5oz53e7yKAXgwlzS1ERHwH3H3:UFbqbVIFFoz5u7PJEg","tlshash":"be332aeeb06ce5f5c17383c4989a5450bb2d3ff96a4000d691f90e64af5c4b86fb8d64","size":50133,"data":"","first_seen":"2025-10-04T05:11:03.668192Z","last_seen":"2025-10-04T22:06:21.036906Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/q3LSfRvN.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"aabcaf406092d2abfaf2865f8d6c345d","sha1":"dff4a863c03268754af54820528972e654b1b835","sha256":"3f9400210e7096afbc7663147fe16f41f85982ac363d1c8506040c5b38572ca2","sha512":"f9af6f7a796692d9ac07af0d7f8e19762d1fb44cf80af21335aaca29f928c5008d33e2156c039095e45a8590d25edf2bdb42d2dec34d2314d057f02001b773a2","ssdeep":"192:PpazyEaxrcxshi0pM3bumtmRNwDA8T4uC3/bR5AmMbgj9ak9rLX:xazyEaZcxshi0+SPQDvk/F5rMS9aeP","tlshash":"30d11bccb4a67021b3774ae5d0b78107763829a134cbd4e1e01eded73e15a62a792d8d","size":6294,"data":"","first_seen":"2025-10-04T05:11:03.316834Z","last_seen":"2025-10-07T18:16:30.09229Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/js/fp2.min.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","size":34877,"data":"","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VRDLWS0SHC\u0026cx=c\u0026gtm=4e5a11","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"88b5411644073a2912a6356f9b569ac7","sha1":"e1b560d4cc32d2dff3d88b10bbce9b73151dc737","sha256":"0824444629a0141b8c0d4946e4728d590032b56694c345b13928a7b78abb11e1","sha512":"5b02490b8254d34a98b23eaaec573ab2b8f3516653931b117414ea1f6e8331d844fc18517d58fde9b55a323fe09becb975ca429668c3322a1ea38f49041da851","ssdeep":"6144:AMZTP5DyYvRC1cZwtgk6dSLd6gxr1X+6RQK:xbdtvIcZwheK","tlshash":"d18419cd73c674665392a478903f018bb5bb68a2f44cc899f185dce42e74a9a4237f7c","size":373653,"data":"","first_seen":"2025-10-04T22:06:21.04271Z","last_seen":"2025-10-04T22:52:06.270862Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/B1SePAqd.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1015aa595125ddc18a70822668479225","sha1":"e18bf50051d177f6bd3bac5066f2e951b77a6926","sha256":"2bf76c6fe77999a7bfb0672e24c2a13760c70618c8a7499a7acc10094a9f8fb9","sha512":"f74346e590b1199ab03e5ccbe0d972b8e86d4eebc4c52437e908774f901772bf13ba5283fdbc20c45ed550a030ca497833647319dbb0f72b939337b9ef04000a","ssdeep":"","tlshash":"8b41651cb87d593d417e58c7b5241168639c0ff89039b9dbb5f94c391b91c14b2aaf10","size":2072,"data":"","first_seen":"2025-10-04T05:11:03.585675Z","last_seen":"2025-10-04T22:06:20.926735Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DYlnab4-.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"13a1db090fcfcd0957c03574bdd319d3","sha1":"2b7718666548bdc8f449836bd1021de02836c376","sha256":"39ed25259d86544e2cf5b42045cbab13db2a54b1527a70f107cb1b8ac2003ef9","sha512":"86283433c236f06fa95af5ecf37758ad78c84a5ccfa86dfce24cf55b867e6e22aba171b1125dcdcfc5fbf0468f19180c05e6f6ddbbc3852a06b46de4dcc15b28","ssdeep":"192:JPTBVAnumh4jyMSNXURJ6zZVcnfs3JiVc7cilWqywU4QHq4G8cprkKFfNf/MVxqA:JPO7OclFFnUdSXcm2Bj487Qcvp","tlshash":"2e025678d42ac5f4e1374a9e58d46f413b4d3fb245908896b4f86a3c278a834337db2e","size":8298,"data":"","first_seen":"2025-10-04T05:11:03.293965Z","last_seen":"2025-10-04T22:06:20.966917Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DXFcmPY7.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"f35775ff648ec6716f2a297601310e96","sha1":"7305e85cbb919d8b85f3a5930e3f296b5e6fa785","sha256":"4511ce05d79359267133ee9e7e89fe59be13436a70679dacdf294e07de1bdc6d","sha512":"c81450c578ff1a8ef035a1d56429dd637b3533bde838720faf99a48ee0d1805b8f24567ecb757ca921606067907d517d04226b17383e91d3a37c4fce563a34f5","ssdeep":"192:XqsxSEFu6ZufGq++k5q2IkZQ+tOWwYpsTctY0ipgNE7oVKRpnKFEN:XhZ8fK+kQ2IkDLwYpfYZplOKRpnv","tlshash":"c212e9e473ac72aa59630dd12475481de434e6243b26f4d1f2ba38bab497c44b273f2d","size":9180,"data":"","first_seen":"2025-10-04T05:11:03.241006Z","last_seen":"2025-10-07T18:16:30.134044Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/C72coOWc.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3bc6cd8453440a2112d76ab82bf7bfd","sha1":"af19e1d374dc436237a39c274cc7162326a03096","sha256":"d2f31fedab9f60c9f48cc734c847add5835557c2d4aacbccc3d1ed8794562a8f","sha512":"7f68ed63cfcda6c55de267e2e26029838317ccf504652ff4c2659492711864100aa52eb5722688d7d6a65efef4897edf1bb6a1d9c8e4cbdf225971f1b8ac00f4","ssdeep":"","tlshash":"ec21fe4fd000d03941aa8df8e069a92163b352ef03e9d6b5d2ee0e750b80025c14db1b","size":1390,"data":"","first_seen":"2025-10-04T05:11:03.629959Z","last_seen":"2025-10-07T18:16:30.085382Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/ext/cdp-customer//v1/analytics-js/ajs-destination.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecdb24cdd6b5a3a4a7ba31895f79ca4b","sha1":"3284a1f3ba7aa68b324499a64bf32c8101701663","sha256":"ef949bb08ab368c25ce835e54a53b3eb842de7e868ff81ff99520ed16394637d","sha512":"e76cf7a6f407f484c5537258129ee7d29b765a14204c0cd4e1ee9ca3d9542ac01c5c0b0c557e704d8c69a1a12b29312b99ec0fd25608af07b3c79ea5a83d0492","ssdeep":"192:d61F3JpeOVXIhCBnMfJlUEpFX8nmuONy+2Yn:doF9TMsEzZuF+2Yn","tlshash":"5f1212ccf6c7f0055267bab5817b451ab33ebd1a244a4894f42bcdd5287c619a12bf38","size":9226,"data":"","first_seen":"2025-06-01T15:05:10.790294Z","last_seen":"2025-12-16T16:58:04.809767Z","times_seen":521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CAMO0y_7.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5aaa7ca85a8ed16e3689002c863e95a7","sha1":"694f3f2f208042403524da6a9bbc047152bd3361","sha256":"be397652c8346fd751f20d5d9e92798c2939d8f35166416520260bcb41c88745","sha512":"ea9774682a037748332b57e6e6e0a21068fa0117a4e0434ea18795ae3a4a10ae9e2085f855924b65003381626d69ca4d403906c5317bb97187f556a15f28f33d","ssdeep":"","tlshash":"c7110e9fbcd2cc7d82b21cb8c5742823138666c873fcd4e805ad0ca55a6a84b9969f13","size":1050,"data":"","first_seen":"2025-10-04T05:11:03.469064Z","last_seen":"2025-10-04T22:06:20.995723Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CQPArnR8.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a896a42d64486df9580f0382b631708b","sha1":"884d9b84e1d4723a5e981843dd4510b187dc76d7","sha256":"f029d4912d32130e9f7f656453e86b6975a9bf5bf18cb1e95b5e6b2fc552c9db","sha512":"a400ff7aad0ee916c8594e59016cad3251c8ccc18b0c3e282ace751d0600c11b2d881fd84fd3e6d85b61d3c0d4da0565cecf765823ab11fef11b459f6f555cff","ssdeep":"192:LD61pTPf4ZEe33hPv0s7pr4QSIZTk2vnWxb5Y3NgqlPMu8vmbdp6EBTiSDULJ7at:H61p8ZEe3xH0wkQSIpkKnWxb5Y3Ngql9","tlshash":"57121525d1fe4c5a633770e11c2e9c1274185f42df528d6398a8c415afefa6c2bc639b","size":9516,"data":"","first_seen":"2025-10-04T05:11:03.536179Z","last_seen":"2025-10-04T22:06:20.777035Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/js/pwa-load-event.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f463b05f25296c1e185cc82087291f6e","sha1":"d15dfa009eaeeaaf36af83b20ace25714adbc583","sha256":"3f5bcf295bac81715b4413d640843ee19600f6a17c96503038c6a4193c331865","sha512":"5ecd0baa189383e24afadcbe391266fac63cdcdcb7da68ab1371168fae81f05f0140b4dcd86bc4cc59f4ebb3f5949e94b302f05de00942886fe3060436ae03bc","ssdeep":"","tlshash":"64e02b7483fc55b808e182b75f47bb15116721a77068d990c1871906f8d148780a2fd2","size":375,"data":"","first_seen":"2024-08-19T15:07:41.99372Z","last_seen":"2026-04-15T02:03:05.836861Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Dacnxtee.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"320ec157fca2c96c27d5b58c11f14b89","sha1":"e0e5dcfb335de172aab5aaab6508452391e5c3f1","sha256":"afd2b3f48c1cce3897968123d1242e363126ef7fcfa9cb926362b79efcc7d4c5","sha512":"83a0fdbfc245ffe78730b87d76e85b4111d45fca04b25835a6cd24961857e9f68ff3bc21519d21ca8561d0acc704396c2144ca92393e78030ea6048c559c3794","ssdeep":"","tlshash":"a3a0120a0450007d208608e4675b509955e0142613b55a8100004a0106154de650cc00","size":86,"data":"","first_seen":"2025-10-04T05:11:03.670272Z","last_seen":"2025-10-07T18:16:30.094419Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/TaNftZks.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"b3207d6a426c185b2a7c5287a16b3b54","sha1":"ef943c31a4709da3cb206379185f4a9298596fc1","sha256":"e5961afbf67e5c460e4a76fbab2ea44d2c538589da9053ecf5ddcb80bd9f16ad","sha512":"6459689b5cdc1c610512d2f364f44c886d41e88ea43170f86b80d8c876b31bb8af2ffa391565414c9827d27b907f8c96fbb043ba29325403b4f764686892c940","ssdeep":"768:ouDRAWjwR2qMm7t58Om4uSyMUWLucH4YrjjiYHNzlchq15lDVtkIfrH5J1Le6VjT:o7eDmpiSyMUWLucH4YrTlcWRf7HuK0de","tlshash":"00f2d709e4199c3ed9b78dd878541402722d2fdfd0804d72a2fc9e155bbbd78229eb6c","size":36888,"data":"","first_seen":"2025-10-04T05:11:03.548498Z","last_seen":"2025-10-07T18:16:30.09333Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/I75g9VYS.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa233fa11a0ef189ec6514008db108cf","sha1":"7c173228093810daa355d0ab1133a87e3d0a31cf","sha256":"2c56278f0a3c9e90f6d268565d0055d1c6776ccc955721a039c07cc09d60678d","sha512":"ceb2abccc0ba38d33aa7a1fb106cca49d448a7422df4fe1f9e540c7c07a4905e900e280cd8790596c275a409a45ac0a213cd57da969b47a43058e4bea86f715f","ssdeep":"","tlshash":"5b41b98c78bd95b8c6be48c7b469116063c91fe8103e68cb72fd1c385b52804731fb14","size":1903,"data":"","first_seen":"2025-10-04T05:11:03.449653Z","last_seen":"2025-10-04T22:06:20.917557Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DGmbE8aB.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"20b9b594a9a85416120e91e583477686","sha1":"387c8bdb9affecb50168ef77d865652cc8b7ad08","sha256":"7afabad56602e84c70cf7ea7d69085fa286955e0dd555f31c1093fe00f053673","sha512":"8248e0b8796028a8b849eea7229f0e2696deccfb9fb00808999a43fc106f5c4620bab52775a3120fe289e7bd074fd08ab3841b8400cd8d79b37dd0279baa7a0a","ssdeep":"","tlshash":"b261a40ea03588bd72399cdae6bb0347232539d23ef8c4a0a11e9c177714993d292b20","size":3172,"data":"","first_seen":"2025-10-04T05:11:03.460447Z","last_seen":"2025-10-04T22:06:20.994768Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/ext/google/recaptcha/api.js?render=explicit","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b536bf8341b9ddd054dc252fdb4221b","sha1":"32746a7636865259071992e8b96dc24242ae5e7e","sha256":"6659a13d4bfb02f73f9cb288e269dcece47de251bf82e4724078e0585fe64254","sha512":"4b2b662f14da571a0e32b9b4cb6077ed427fae68de7af6551304dc43ab191ab6af7dfdbda29ec5d3da158f4d32c38d0d39cb22091024ee2b538dba167728a6bd","ssdeep":"","tlshash":"ed1102731a14e0394b3209e1e2ffcb75e492701cf15845e8a515dac42e79dcbce05589","size":1019,"data":"","first_seen":"2025-10-02T05:22:43.534294Z","last_seen":"2025-10-07T18:16:30.149112Z","times_seen":255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/BVJD_FzT.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"7238102902131e678624d38a52b93598","sha1":"0bbded74519658146adb846e34a258dc1d0dca03","sha256":"05cf9f3b464f937efb279653d4a70ece477c25c3db903e720cfb062a06308146","sha512":"3cc8cefecce474edd6549b99baa958ada12a1a7f5b5b5f360c02a362bbc63cc7b1427b65ee0f211281de7e4f3fc0c238e7ba192aade89ce8554cb4c0aff4179d","ssdeep":"","tlshash":"1ef09e8e70a3d2b0b777c789c937c642a47c1e52380de5d1d04a5a45324b481e73d72e","size":512,"data":"","first_seen":"2025-10-04T05:11:03.419457Z","last_seen":"2025-10-07T18:16:30.061836Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Bej8Ac-i.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e972302236ef422b3f71e0a563a7b92","sha1":"8601e6e3d189efd82236352799cd94f0a9730ac9","sha256":"d2032f355ad4236b6f0e6aed6c7bf168b6e9b0e3aa32bec4ece9976feb210179","sha512":"855d9aaa3827a656f749d04efadf065cc7ab65bc92a4fa43ae88ac099e043c725d955f272c4afea7e058abd7ab5c90fc4d581941999c5c45480044d3e96f3235","ssdeep":"96:bj8tlTYiN7xRLAHhaJcZ8zrMaMTTJ7FhGe7ytq6:bj8tlTYM7LQ9Z8/MaMTTZFhr7Gq6","tlshash":"34917519b0845cf899b187cedc4108b269db9ebf8410e97173fa2f3027d5ca4e206b29","size":4544,"data":"","first_seen":"2025-10-04T05:11:03.545188Z","last_seen":"2025-10-04T22:06:20.933009Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/BcQyR81P.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1bb2f1c672b46e1e228db027877894f","sha1":"a00f9fe96cc653f6bc82681ab43e111bab926983","sha256":"cd73e1ba4d908d7668ad75d6f39f1638ce188ae552690210fa7dbcd6541b76ef","sha512":"b929930e4043bf2310d54d29390f0e37eece2d5496935bddaafad8a567e7bc273a244f00fb50d806f2e2ae66aedb9a12aa1e4fb28224eb4e847e96a83d44c86b","ssdeep":"","tlshash":"191121af10c48dfdb14c4ef45eb6101524d80da932ed5087c1085909833102ae259723","size":1039,"data":"","first_seen":"2025-10-04T05:11:03.311807Z","last_seen":"2025-10-04T22:06:21.001183Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DJcl_WQ1.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"3bda576d37392e259fe30e77ff55fbc4","sha1":"a4274c75e0355947112b6108130079c0722ffb9d","sha256":"20451b5d76ce39f1c30c60469bbe628b6f23dbfdd5d77e95807be21647500717","sha512":"6c38ff2376a929370791e4ecf018e4af5221c18e53c3febd055741285540ca9db3e4b80641305409659bb13c7fba3168465ccecc7f648d3f432c32850e8c9865","ssdeep":"","tlshash":"9941858ef1545d3063d7e5f190196100875d9f2b75bd85d0b925b7c3022297efdcb690","size":2041,"data":"","first_seen":"2025-10-04T05:11:03.635582Z","last_seen":"2025-10-04T22:06:20.93038Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DxTym_EP.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"a86bd43371591230ada5d1456dab8aa0","sha1":"b63e835649ce8bec3af500a596a7a1f58272afb2","sha256":"23ec8c94b2d36cce2ca68ad1e07e75f81b886d3d0077acde44ee2f5981e3ca10","sha512":"c2f22c55f07b8c50d90c20493fc7dc2b4ed68615b8adca2c23cbb0c8439285544b86a623e919ed65f23f8dd6202d553dab85551ce8953e3e9c963b24ff059899","ssdeep":"96:oeyq53hKMoKMj1W3FdeF31f5HnPx1oRstVCBR4Ir8Dtgjiby+qUECPRv5:o83BY1W3eFFvmQVCkIgJbtD","tlshash":"f5b1a7e4b1d9e09bb7b64fd1c032225260076ba57434f0d0f27aad73215be54a562b3f","size":5164,"data":"","first_seen":"2025-10-04T05:11:03.300471Z","last_seen":"2025-10-07T18:16:30.054069Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/BbqPNdSU.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"d41b27ae63a30ec5d67cd47eabe3049e","sha1":"d1c10551d8dc1c36a70afbd414a0536cf64bc8b5","sha256":"d15f6a0302235ea1ec65d60e9c153f9edaf3344ac40599380885512fe83dea5c","sha512":"44f9246dede1ff1a1665f88dd0042c43ecefd28cf64dc01d4b34d60c88b6fa95255cf0185582c3c23a88f8edd54fb01d8e47576c7aca101ebc167b8de3f2b05f","ssdeep":"192:tXiFojMIZjkItgj6pnaJe/HA9iReMDjHMtpgCtAoRXSAd55rD1W55Jr0UWip8W4a:xiCMIZjy0LhYRHMAhPMN07i6jC","tlshash":"1c0240de520a64b00bd706fa81e846d0d6b00844f04d997c64f8dddf477ec8917a6bbe","size":8647,"data":"","first_seen":"2025-10-04T05:11:03.58126Z","last_seen":"2025-10-07T18:16:30.056453Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KN757LMM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"59c04858f7891a128dcc4dad47dd6d7d","sha1":"778ef8f9273793aaaa7019056f14f786bbccb551","sha256":"88d4d99b69f3a4fb7f2d137f6b8449f798cb69caa5eb67f0c8947fa41602d61c","sha512":"e470f2c332353935ab7e6081f039590c582a7f5411fa60b8215d600199896642eed8fbe1a3f4ca1a7388b0b7c878f2ba1f747b0c2186e3e5ed74b70cc943872b","ssdeep":"3072:LRb4t4V2o5qOTaksP0GIOU3Ty9durXx9COvCVK4N6znVg4gcAmvmrNTIcEgk6dSU:l/LTlDyYvRCVZcZOutgk6dSLd6g+RgwV","tlshash":"a4841acdb3c674664393a478903f014ba1bb69a2f44cd895f185dce42db4aaa4237f7c","size":385904,"data":"","first_seen":"2025-10-04T22:06:21.043912Z","last_seen":"2025-10-04T22:06:21.043912Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/B0dn7nxz.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"89793b8dae34be90ae37ce3e8dc34e98","sha1":"a542fe10dec9701f6ec34845095643ff027e2ee7","sha256":"5cc17bb8cf937ae04ede57674422d39731160710c988659d51483500aad05de4","sha512":"5682a6b325daa93ac60a7814da1ce1a2f21bb43316a6c11d21bf2813d216e94325e0b7245105cd6f0d1178dd202c30e57d6f838022950905f84244dffa84204d","ssdeep":"","tlshash":"374130ea274e0914340e8342c881f5aaa73663a5b4f3d06c3ce29dc37201c43f6b0e65","size":2215,"data":"","first_seen":"2025-10-04T05:11:03.660171Z","last_seen":"2025-10-04T22:06:20.918737Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DQ1ERKoC.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"b4f0ee70c084956ffa41ed79de20130f","sha1":"44f45d702bb69567d4cae815a10996c371430ad1","sha256":"37700f84f1bcda6e3849bad210531bcce6cba541e39d45631867cf05e35dbcf0","sha512":"c1db8d3a52a7a9f1c7fa79f3e3f8e7de3dbbc4728a66a078f7f59a6bac46f6893925e9f55ed71656ad65649bb51b9808cfb4672d62e7663688890d2debc6abbd","ssdeep":"384:M60fp3JEQbMc1YFlYI0SYae4RgaVG3QmdOI4v9GnTMUJN2SOZgmVjn:d0x36m6/YIte4RW4v94TMUJNl0gmVj","tlshash":"9d62f81ef48e9c7d52ba48c469d47941b53c2f9bd04048f2a4f6ce212247c6cf76eab9","size":15425,"data":"","first_seen":"2025-10-04T05:11:03.341848Z","last_seen":"2025-10-04T22:06:20.919739Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/cryptojs-aes-format.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6bc38f77922eaa6f1b23716034b4a2e","sha1":"db781b1e30c4f2a1d63d47054f0903c463cf01ab","sha256":"9ca00bddae85e30d59672da0089ea5e132df97d75a92f42114fe1befbaeaf32d","sha512":"0ad7c00c1564d77f8463dfc81003c0d6cd6ada4e3d01094331f72847f17718e4a6b2c7a2a0bcbd96a1107bc6cb9bcb1721e7b2968ae4544595ab98d39bb30c82","ssdeep":"","tlshash":"163177407debb4c287e8e1d50435a044f67b7a0ab1558ef3aa5aa404ffedf3006326e4","size":1494,"data":"","first_seen":"2023-03-07T18:27:54Z","last_seen":"2026-08-07T16:57:51.090464Z","times_seen":717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/b-vBzq2i.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"36c0c6b8ef144d7bf7caa7079c3a416a","sha1":"8dd20af034fdbf41e59ffbc3aa163434f7ee366a","sha256":"3680ac7d48ce5a8a0c9fde6d13412fb8edae11c7de9830872df097f8aedc5abf","sha512":"927260065160a49bff0120fc290821cc672903ea0d9135823628640c37dbd0e28581b0266cf1d189d1eb33fe85ae593c49035d3bb673b31857c5a49d2903913f","ssdeep":"","tlshash":"856141fc1635a57226eb17bb43620ca242764845f049b27010da8f0d592dc984bf3ffa","size":3347,"data":"","first_seen":"2025-10-04T05:11:03.465869Z","last_seen":"2025-10-07T18:16:30.055353Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/ext/google/recaptcha/api.js?render=explicit","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b536bf8341b9ddd054dc252fdb4221b","sha1":"32746a7636865259071992e8b96dc24242ae5e7e","sha256":"6659a13d4bfb02f73f9cb288e269dcece47de251bf82e4724078e0585fe64254","sha512":"4b2b662f14da571a0e32b9b4cb6077ed427fae68de7af6551304dc43ab191ab6af7dfdbda29ec5d3da158f4d32c38d0d39cb22091024ee2b538dba167728a6bd","ssdeep":"","tlshash":"ed1102731a14e0394b3209e1e2ffcb75e492701cf15845e8a515dac42e79dcbce05589","size":1019,"data":"","first_seen":"2025-10-02T05:22:43.534294Z","last_seen":"2025-10-07T18:16:30.149112Z","times_seen":255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/tPdbiW_V.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"af7805d42f0e94d87c24a603905aa544","sha1":"7b8e20de9b8033988fd4fb49ae5214be2a1b317e","sha256":"67962a43b72e5541bff19a54203273e73fa6a40aef2c34b20da51c95817d336f","sha512":"4f5b71fae1dbed1ca64d3290836d4ee5f28885ca526c71eaccbad91c58ee45a25d2a2e847846f68d8e02509d5c833f84c2e7a9928991b0418953cbe3dc954732","ssdeep":"","tlshash":"07c01285d8202077cc607828a1d20f42027e3644e115d17c77fc2482f470565a4aec65","size":192,"data":"","first_seen":"2024-05-07T05:56:57Z","last_seen":"2026-01-21T08:18:56.877435Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"243dcbbab1864ae304323accde3f63e0","sha1":"7ac807de29469c5e810042601c8a11bf3601b893","sha256":"43ebc8eaf80b1efe8dd36390371da196ac1ee2ce30e3210b583a7adf20335fda","sha512":"2d9905ef903fe79fb3c24a2c552599dfaab246622edd7dc9348fd4d593e0351166cbbf59d306849c6601839c6198884f1fc600ae9e0728ea7f26cc363c58343a","ssdeep":"","tlshash":"d8a011802022a8030aa8800c022bbb003a38abb0a280022082308208300a023280a388","size":77,"data":"","first_seen":"2025-10-04T05:11:03.69028Z","last_seen":"2026-02-04T12:10:15.553292Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DVB3Cdql.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"20eed75093de2fc9d2444246aefbafec","sha1":"4f36aff0a4fe6f29e8db087ce85d2caa85dc3f4f","sha256":"fd6447eb787622249c366ac85f7ac12f55a700865902fdf1a5b6dd6997096769","sha512":"a11c3328cbef91f50466b6d9c8b4b01d21e125ce99a87a5ee73e296f08fd6f81f72a1bb79f7ea9800f09266f2b04d48ddf49905e6d60dc5d7cf899cf8417a0e5","ssdeep":"768:bXU8MMca080Hjkh5UyvucDYxhROs9SewPpUzSsLP20+6a7kHGQPLFODM:OI088a5bvuc0xys9SeSpU1Lu0+67mQhN","tlshash":"7ee2c6cc7641b018a3a711b6e1ef580fb37a2984980e8554a0aef5e43d7c4bd43abddd","size":33499,"data":"","first_seen":"2025-10-04T05:11:03.415244Z","last_seen":"2025-10-07T18:16:30.105627Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CIV1DmJm.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"3bcb3cb731faa08f8e975f22576abf93","sha1":"05344c9790022a0d796fe682cfba3af36a0347db","sha256":"ee27ce8fd95c8b0501fb72850528edd31a3d0195819a462635ca117c897cc60f","sha512":"73d6c16f46985d8259360bab931cb67e77640c8585a6ef8df1950979b4eae173ae318c351dbd07548a5d6d4b28d596f35c41db8840566f386f52f61fd70fce23","ssdeep":"","tlshash":"0c118cc070a4a431c3b849c801d5abb2b55d96843de782d4e45e1d33213f89cc579b19","size":874,"data":"","first_seen":"2025-10-04T05:11:03.497488Z","last_seen":"2025-10-07T18:16:30.088926Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DI7JmEzD.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"83a8b3c06aa9f7eac9c12106dd8cf92f","sha1":"f081a1edac6e1989b200fa17f04e94d01750f4e4","sha256":"159f44488e5191a76543c322a2a9f9e2e8d50617822fbc460ac73b3abe3f1cef","sha512":"4e5487aa4e63cf5ebd78057ecc0bdc55a71a9243442220730a0602bff3798193c048f927bfcf53bdfd9b3d6fb0f47a76bc4ff749c2834cb71623833c7d762cf8","ssdeep":"","tlshash":"454112e3932448e75862e4c538e35a305b5599e8e1fa2089bc3acec5725ea07fc38770","size":2327,"data":"","first_seen":"2025-10-04T05:11:03.650421Z","last_seen":"2025-10-04T22:06:20.901585Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/BG1pC2vj.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"2fd19b28d6e444b5c053c57ae7461306","sha1":"90404b4b4a6f6a7d21c237f7551a26b9bfb1bfd4","sha256":"d34a9fcf1115873f31f12a21be9ec320c3012b6529adcb557d0332f38136a8dc","sha512":"74854d976471449f8d9a514c7897eabd51d9d5587d4cf2dd97b3360668717a7da17a16d8018dbb188c7ced2243a4ef1bad3f05db08ebd574a948a48cda395eb4","ssdeep":"96:NieSyTsFvwmBocgjI3Y0Pmn/6MjNZDht0+cxxV8i05rZC:NieSyTauUobdfF5FC","tlshash":"a4b15418e868cdb6d152415d9c0b14d079dd3eadc475e435e4f869902bbac3ca28d72e","size":5285,"data":"","first_seen":"2025-10-04T05:11:03.471664Z","last_seen":"2025-10-04T22:06:21.029026Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/haTT5Cld.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b3643735fb5f19f98de7f3d5d35b554","sha1":"a58338f254cbbb8b3627a25ff613980a074a607d","sha256":"d162ec9326203b98a953fe3085fc56b25dd666a614006d1ef9f99abcf6278bd8","sha512":"2f4dd643579e44157dfbb5599d2c87bf9f97caef5a658693548ddc1c459542d125e47197ca2944527f93eb5cebc7afd012caa1e9df228c3899fb5711121ed282","ssdeep":"","tlshash":"5df0a68fc09284bca145ece0d431c222137a68b727f5eaa8c2cf2b346340035c88929b","size":621,"data":"","first_seen":"2025-10-04T05:11:03.664228Z","last_seen":"2025-10-04T22:06:20.976956Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/Jv8jlA-BQE5JD6rA-h_iqNH2/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"79d46b9e2a42785f28f64082a61eabbf","sha1":"c1b66a198b40bcd1f6cce34704173f997ecd8608","sha256":"6159c42218db471f012088abd52e60fe39e5c1dcf2981ff7d80f38d8bd36a690","sha512":"820943d8b4d684933ce756b9d59c499147aae8336a811b042d8ee8bf035ecb20be12ff815d0ba4a8676c815b9e6bf2d687591d434bedfbbf07e56dae34f39c49","ssdeep":"12288:iF/YdSVcst0yzYy0Vqqog/cT6eKb54lptHAgR1BoOdy3aWKi:QQozYJog/Y6fV4lbpR1BRdyKK","tlshash":"b70529c870257a624332b5f6707b209da36e5966d45c095d70a6c4f03fb098db0baebf","size":820265,"data":"","first_seen":"2025-10-01T09:12:21.067891Z","last_seen":"2026-06-02T23:59:04.965062Z","times_seen":7915,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/zVFskexI.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"5ea5cccdf7fe73c144e70d799815d49a","sha1":"81bb06b30d93384c5161e2b6f8071ae99233346c","sha256":"ff9b0b00de6e591e7358f950969ab47c64969182cc7735d0f953a7fe2d85a70f","sha512":"48ae4ccbf48d353d4436238f7163e488638ee29f4049ba15a4ca4258a89a4609afb9d9563b4cdc56d88e7cb1d6e45c1d915309015410d38f6f716a35ddb961d2","ssdeep":"96:/SI0Lgam5pFjwsmyzqVBRJzxv7A28/s1/HEwYx+3cCL:/8mjsyGRFThSu/j4U","tlshash":"0fa1858f1240762e7ded4b5543f4681883304886fc1c27edf4ae5d389b5a88f61bb674","size":4910,"data":"","first_seen":"2025-10-04T05:11:03.358433Z","last_seen":"2025-10-07T18:16:30.125287Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DVB3Cdql.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"20eed75093de2fc9d2444246aefbafec","sha1":"4f36aff0a4fe6f29e8db087ce85d2caa85dc3f4f","sha256":"fd6447eb787622249c366ac85f7ac12f55a700865902fdf1a5b6dd6997096769","sha512":"a11c3328cbef91f50466b6d9c8b4b01d21e125ce99a87a5ee73e296f08fd6f81f72a1bb79f7ea9800f09266f2b04d48ddf49905e6d60dc5d7cf899cf8417a0e5","ssdeep":"768:bXU8MMca080Hjkh5UyvucDYxhROs9SewPpUzSsLP20+6a7kHGQPLFODM:OI088a5bvuc0xys9SeSpU1Lu0+67mQhN","tlshash":"7ee2c6cc7641b018a3a711b6e1ef580fb37a2984980e8554a0aef5e43d7c4bd43abddd","size":33499,"data":"","first_seen":"2025-10-04T05:11:03.415244Z","last_seen":"2025-10-07T18:16:30.105627Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CFU304S8.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"65b0cca89e40818f39fdd7753db6d142","sha1":"24e169a25a2e5e795d2ba4918ad600ab939bc23a","sha256":"261a0d9b3884cb4797de2dd31290199dbcec4f295a6ca9ee2c3b48ab9d9651ce","sha512":"e4c57b7230da955929c01aa05a22c6039a4ab395d6480587e21169106ce56e84aa99238c37d03c5944a72a6c799d55cc072ee59b5e498caf41fd1f6e021b43be","ssdeep":"","tlshash":"53b092d6728a3ce12602b810a15b80b4a131e6240b8a47208026f08739724a48a52e38","size":120,"data":"","first_seen":"2024-12-07T17:14:43.577967Z","last_seen":"2026-08-04T09:28:00.148891Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/cryptojs-aes.min.js?v=1","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd93b7f0987a614bc17698503bcb6af9","sha1":"68a66448326499ff34c75bf31e2769b278584e0c","sha256":"8d4fae1a37a5b5338c889d0897b50024194b4d3ae94940e7e42c1c1423a1183e","sha512":"e3b87dfe10c0e3f3d801a85ae9c654a74eac22c2a93a757568a0d2b13755c36aeb5f9337e94a21db4ef2d1f0f1cfb98fccbbb0151d5cdf8d967730df96bfde98","ssdeep":"192:9BIGDmDm90mP9z8Ui015lN1I5rI2Tru6hMJFmHV+mdpwIfyAaYfKnNVYkUUFJZm3:9yiB0ez8UiIX1SrTegsEHJuI+y8Z7AX","tlshash":"625297c936edb94263963028587f6017b86b28b6945c4824f29cd4ddff9899dc03ae3c","size":13722,"data":"","first_seen":"2024-11-30T18:08:34.076577Z","last_seen":"2026-06-26T20:23:29.818692Z","times_seen":1206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DlAUqK2U.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","size":91,"data":"","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-08-15T10:17:47.208535Z","times_seen":25525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CFU304S8.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"65b0cca89e40818f39fdd7753db6d142","sha1":"24e169a25a2e5e795d2ba4918ad600ab939bc23a","sha256":"261a0d9b3884cb4797de2dd31290199dbcec4f295a6ca9ee2c3b48ab9d9651ce","sha512":"e4c57b7230da955929c01aa05a22c6039a4ab395d6480587e21169106ce56e84aa99238c37d03c5944a72a6c799d55cc072ee59b5e498caf41fd1f6e021b43be","ssdeep":"","tlshash":"53b092d6728a3ce12602b810a15b80b4a131e6240b8a47208026f08739724a48a52e38","size":120,"data":"","first_seen":"2024-12-07T17:14:43.577967Z","last_seen":"2026-08-04T09:28:00.148891Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VRDLWS0SHC\u0026cx=c\u0026gtm=4e5a20h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"46b7e4b06d24a105af6a96eb8d500752","sha1":"e8b7d74c27ccb9b9731fbab1eee729c3bbae369d","sha256":"04c7eb483b48b6c54a7ae6066e803530511a3e10d9c1502cce5e216e59952abe","sha512":"31f2601b255bfbee0d31831fbf81ecc3fc687cd3e5487a873d08e8bdaa9134951bec89573f66d6e3261107253a24eaf6f65b5cb8e8178213472f3979919a41ef","ssdeep":"6144:AOZTP5DyYvRCLdIuLXX3AAmozVqnRejNVj:PbdtvqdIbuj","tlshash":"638419cdb3c674665392a478903f018bb5bb68a2f44cc899f185dce42e74a9a4137f7c","size":373653,"data":"","first_seen":"2025-10-04T22:06:20.814862Z","last_seen":"2025-10-04T22:06:20.814862Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b8c11178c688e9a93fcea1d63b2ab3d","sha1":"712b0e7e41a2cbc5b662c6e47ef6da6f1faca702","sha256":"c3af67b8222f82cffba18fa16c0f56eb0894f81da6e5f1286c4be6d6fc3c8411","sha512":"3f6e1398a534e3cdff373a79b44aa6adb760b24d3fb7bb8ca296b740589d92d9217f9e6d892484e9a145a202204c24dde5b22a331d882cee3c2184dde722cdda","ssdeep":"","tlshash":"5321fe35b99bdc6409ce346e851f230be4700a49da21b19096f0fe8128b8ab52582a1a","size":1214,"data":"","first_seen":"2025-10-04T22:06:21.045074Z","last_seen":"2025-10-04T22:06:21.045074Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/ui-resources.php?location=default\u0026mode=desktop\u0026lang=ru\u00269ae4a29f\u0026callback=getWebimUIResourcesCallback","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"11b438f338bd2b9e4671ecd18c16989c","sha1":"438b66fdfd873ff5f47c57bbaacd3ae1b0eeae27","sha256":"226f3be66a9d2f9f6a3bdad6e3e280a292f0d9bf7cce15fc382cb023bad866a3","sha512":"a6fba66b9240a4fec3298822e71776454c9ce66287af73b2839eeb18819b0af53f0076f22afbeba1c7477028333d5b07bcf5fa0d8a7fcf99c3fa355ae50bc800","ssdeep":"1536:QQHOcWqV61g4iy5VkMN2KQRgME234Cs57h7Fbsas1sUs+s1seT5Ggr6uN+Y3L5i4:cMCvyawQJ3gy5f9uZS44WkHD","tlshash":"dfd4270feed21469be2bee6361f70655713d34a29590079cb22f34de5f81ce29322b64","size":625730,"data":"","first_seen":"2025-10-04T05:11:03.45314Z","last_seen":"2025-10-09T10:23:07.246583Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Br1FBsO3.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"767f58379d7921f95c8dc6c600a3df03","sha1":"13505dd414f4a7979cc3098535dd88e1e1ce193e","sha256":"fa877f9e586ac8365282757cb02e92b352649b7ee3f6cb33eb0026bb4f1c95e9","sha512":"57b4279a8e6d24ffa4bd77e6812666ea155eca8cb4fc3c1de0b42259393b937babb44298e1a70c2910ef36fbfc356c2e4aa32b36583304980a9e2f2fb98062f9","ssdeep":"","tlshash":"9611ce2bfa4a1b6263331c7646a931e6cf650b8b2c7994c43c54df261237c83e5a6f54","size":1029,"data":"","first_seen":"2025-10-04T05:11:03.632172Z","last_seen":"2025-10-07T18:16:30.14286Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/4v6vyIur.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"10c92c717f8762cb181545e7d2c6b331","sha1":"712d5130ad1deb5bae8e8e479a21d4908274dd34","sha256":"dfc421c8fbb78ff109f24399be0a334cbf47b3b407cf2bc5c31f50e2da4cd9a0","sha512":"34893e23627e8ef59a86fd8bec5618574feca8590438c4edd0f6f59efb2cfd25ed0b3bc334c2d4afe53e9e96f45ca65bb651f5ac475760cbcb269ac3a6c6eb23","ssdeep":"1536:QsrUHXu9+2FYnFjqN1q46HAXJF707AMvrHCRAxpdh5CVaJwBNI5tdJked5qK:QxHXuw2FYW2T5Sa1RdD","tlshash":"bed35f4b4e0c0e7a056217b12fada7b362acc07471dbc3e557bf82182375475aea279c","size":136604,"data":"","first_seen":"2025-10-04T05:11:03.528287Z","last_seen":"2025-10-07T18:16:30.112258Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b7ffd5b7408c1219fbd35dd53208e70","sha1":"87db90852ceaf58be691a8c2492353a5d76de059","sha256":"fb997fc9d5069092971ad25f0131258ced2c36bf9d313ad535de25ac5c36e70c","sha512":"4045a6bb31e36cdcd5d0d32b3a672004365bfe391ea66b11bf2d2ee96e2715105255f02bf2b442072b902e9f0ba7db465a5d4733ddf3b18378375de86f112d8f","ssdeep":"","tlshash":"633126cab36189126a97383b653b5344617326e61e0268a3f2260e447c2cadbd53375d","size":1677,"data":"","first_seen":"2025-08-09T06:39:59.161093Z","last_seen":"2026-03-24T20:06:00.342299Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/ls-cdn.amplitude/analytics-browser-2.6.2-beta.0-min.js.gz","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a81d9804ed47201de5314a7110e680be","sha1":"df58e208599843e46894e9c2bbfdf2feb2a985a5","sha256":"59dd69f4230f7535182747c17235fe4526d34826a142498485779bfdb5d617f1","sha512":"2c15805effa726a40e1b3156d003df4b5f602ab4c1b09b8897ff759d143c0a33a5eb7cc90887b850b1f209ccb05b7be263935ad805ad86383f88947d777fdb42","ssdeep":"768:p6wmsZPARRFO/J6zZsideR53I+dte7I4GWyihZurBJ8:/msY4/JceR54+zeU4GWyaZudq","tlshash":"f35372c9f6cbf0250393a5b8907f140ab33e7e9d242d4428f626d9d53c6d6499233bb9","size":66596,"data":"","first_seen":"2025-03-26T18:10:08.318249Z","last_seen":"2026-06-26T20:23:29.909592Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/BgUJLoS-.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"3d2c02d74f4c0768d16385c23713a8c0","sha1":"1e2f8b6a1650552df13bd17f73f349846209ee3c","sha256":"8512dcb0a79df73db990833caf165aab1438ff109b77ddd32e991b8b0a69adff","sha512":"7ac5308be49ee81fff510e3d24e13ac74a8a6d69821206891d8e8a82542370041a96fb5012228d6288aa1c3892b3b4d6ee558d608c84817a858b19611b3b74ef","ssdeep":"","tlshash":"4f51421e7eda54310b2a2830e09714a3a009dad11c1dc721b9204d9d79b1d96cdb3fef","size":2783,"data":"","first_seen":"2025-10-04T05:11:03.439288Z","last_seen":"2025-10-07T18:16:30.141403Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b7ffd5b7408c1219fbd35dd53208e70","sha1":"87db90852ceaf58be691a8c2492353a5d76de059","sha256":"fb997fc9d5069092971ad25f0131258ced2c36bf9d313ad535de25ac5c36e70c","sha512":"4045a6bb31e36cdcd5d0d32b3a672004365bfe391ea66b11bf2d2ee96e2715105255f02bf2b442072b902e9f0ba7db465a5d4733ddf3b18378375de86f112d8f","ssdeep":"","tlshash":"633126cab36189126a97383b653b5344617326e61e0268a3f2260e447c2cadbd53375d","size":1677,"data":"","first_seen":"2025-08-09T06:39:59.161093Z","last_seen":"2026-03-24T20:06:00.342299Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/jXgXeeQE.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f84804da82d9c4cb7ddd9e71f0ca1f6b","sha1":"64c4e19b9eb6ea410c08dd63881ddd0cb318255d","sha256":"2c0d1951397683fbd5db45458698ddee96bc097d1c27017de3493bd092d4b841","sha512":"87c74f73697be0716dfc5d1a33ef2f121591b1c214a1e4e2ad5c778f0817a36c52fe0bbd776c8abbe36532eb8182a1be5d688e4a9103748744a2718d4b51e618","ssdeep":"6144:cCuayegAufVcvTgOg1msMr0Ouyfo8x326pl5OaPydoMbUCzxNeuGgSBm5uz:cCuayegAufVcvTgOg1msMr0Ouyfo8x3p","tlshash":"bf247e320e5d1cbd1111a166de1cab1a38de81fe3e9b93e107796e6e35f10309ea931d","size":217183,"data":"","first_seen":"2025-10-04T05:11:03.708279Z","last_seen":"2025-10-07T18:16:30.087249Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/ext/cdp-customer//v1/analytics-js/ajs-destination.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecdb24cdd6b5a3a4a7ba31895f79ca4b","sha1":"3284a1f3ba7aa68b324499a64bf32c8101701663","sha256":"ef949bb08ab368c25ce835e54a53b3eb842de7e868ff81ff99520ed16394637d","sha512":"e76cf7a6f407f484c5537258129ee7d29b765a14204c0cd4e1ee9ca3d9542ac01c5c0b0c557e704d8c69a1a12b29312b99ec0fd25608af07b3c79ea5a83d0492","ssdeep":"192:d61F3JpeOVXIhCBnMfJlUEpFX8nmuONy+2Yn:doF9TMsEzZuF+2Yn","tlshash":"5f1212ccf6c7f0055267bab5817b451ab33ebd1a244a4894f42bcdd5287c619a12bf38","size":9226,"data":"","first_seen":"2025-06-01T15:05:10.790294Z","last_seen":"2025-12-16T16:58:04.809767Z","times_seen":521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/SlotsPlay.DoPbBCgM.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/SlotsPlay.DoPbBCgM.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=9l4jof0J2NaQ6Zdg; __ddg10_=1759615530; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OcVCkm5swlGQBOdS; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-d68\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3432,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3431)","md5":"0031c3b6534b6253124aae3a5174b017","sha1":"4cb72691682e5c93555df868d15a563386536230","sha256":"20f9b1c63679e7a683a8a9c5505f47dc2b979760efcd6037bb66bbba61aa7597","sha512":"5d661b7932e2aec8ed042ba8832d78d4520d46af5b3a32d0509cee2d2732134838d9d7d6fac75a691b4516778af692b0a3f6ce200e56dec7919e796f6aeabfae","ssdeep":"","tlshash":"42618f293fcf6838b022d15b71d1599cd27cee0b8119169d6d13c5a8c5eb60bbfe015a","first_seen":"2025-10-04T05:11:03.260203Z","last_seen":"2025-10-09T10:23:07.385498Z","times_seen":4,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CQPArnR8.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/CQPArnR8.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/CkMSVCQx.js\r\nCookie: __ddg8_=l7hkYJSaiM5KUGbK; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=VXyFehQ6mTXRNBzM; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-252c\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":9516,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5011)","md5":"a896a42d64486df9580f0382b631708b","sha1":"884d9b84e1d4723a5e981843dd4510b187dc76d7","sha256":"f029d4912d32130e9f7f656453e86b6975a9bf5bf18cb1e95b5e6b2fc552c9db","sha512":"a400ff7aad0ee916c8594e59016cad3251c8ccc18b0c3e282ace751d0600c11b2d881fd84fd3e6d85b61d3c0d4da0565cecf765823ab11fef11b459f6f555cff","ssdeep":"192:LD61pTPf4ZEe33hPv0s7pr4QSIZTk2vnWxb5Y3NgqlPMu8vmbdp6EBTiSDULJ7at:H61p8ZEe3xH0wkQSIpkKnWxb5Y3Ngql9","tlshash":"57121525d1fe4c5a633770e11c2e9c1274185f42df528d6398a8c415afefa6c2bc639b","first_seen":"2025-10-04T05:11:03.536179Z","last_seen":"2025-10-04T22:06:20.777035Z","times_seen":3,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/roboto-regular.BtWrZLw2.woff","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:26.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/roboto-regular.BtWrZLw2.woff HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=ZD147zRyhIzGWfmm; __ddg10_=1759615526; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=0WYxfaOycsK9hz1u; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg10_=1759615526; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: font/woff\r\ncontent-length: 139160\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: \"68df7ca1-21f98\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":139160,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 139160, version 1.0","md5":"ae91f35c10375f1dab7137a298aba7c9","sha1":"6b9aae9dddb20bdfc56381f0d64bf54433977413","sha256":"264a621481c81a289ac3227cd63cc91902de13789dd9df920f0e2f465fa2bd38","sha512":"b0253e74fe7baf39316ec12622b1ace4899c51f6ce5c193e0ca2dbf713e4e1ce3d5ed4145d46680a91c68baa44bd73a31834e544c0d732f77975e72424151b60","ssdeep":"3072:2isY+Dpc1q2EHUmPsBut5j+mN9s+EIUb0Psp45nE:Tspc1s0osS5rc0Er","tlshash":"60d31255eb38110ff8be77f86dcad33408f471d5c7a322a4955802abae44fd4ea24da1","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-03-01T21:47:53.345572Z","times_seen":69,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/sounds/click.mp3","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /sounds/click.mp3 HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=3cSQAEPVUoQw1bC3; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=4y1vrt2h7rltUBUB; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 6731\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: \"68df7ca2-1a4b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6731,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"b497ee5b7f24d5540859a2fe9a2f94a8","sha1":"402f32b8a0c59a6655cee008020948c8b0dc3878","sha256":"627e28dd820dbe208a2d764c086b4eca2c54330b9741073bec9da852aa592962","sha512":"1f0e4fd80c187354ac665cf7e3dc52b8834ef35022c6fe922db3aae0f89f8530c5e97aa2d4860f2351c8fbf05ea2252593d626d12b8f90865b7eca6b6a476ee9","ssdeep":"192:79qf6EhSf0IotHNKWliJRgFn0DsEZM8+h/wgMgl:79qf6ASfCtHtliJ2F6sEZMph/w1gl","tlshash":"cad16d6a6d478951e40c5570d8ce1b4c737824b5afb0b3daa267f79e00e536c12ceb29","first_seen":"2023-04-10T18:19:05Z","last_seen":"2026-06-26T20:23:29.963181Z","times_seen":1246,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":86,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/BUr0zCR67qQ4j0qMeOwPGX6iQEQIzlTbwUrAn2i2.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/BUr0zCR67qQ4j0qMeOwPGX6iQEQIzlTbwUrAn2i2.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/webp\r\nContent-Length: 133840\r\nConnection: keep-alive\r\nlast-modified: Wed, 10 Sep 2025 13:37:57 GMT\r\nx-rgw-object-type: Normal\r\netag: \"d204cfc6e81ae9a03f7b2fb229231fb1\"\r\nx-amz-request-id: tx000009f555e88be0fdd94-0068c17f37-173861bf6-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":133840,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2880x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d204cfc6e81ae9a03f7b2fb229231fb1","sha1":"7d627a9a88f2643bc6e946f77c8354689b6ae1d5","sha256":"63eb1456052f39d3f98a2e34b53293a740438e6974ac4ee5e24b88d656283fca","sha512":"78c9ffcaf529263e93031a54b3e43078afdb88bd87e9fcebddf47689c2f9cc6877798d9af2151470828ced80a70e187ffa5f2ff78d194ddf2142bd0d67f8c9fe","ssdeep":"3072:U/bgxN7zgnnITc1HmE12OG2D7UbWSGbyYnZo5t7qZBsem:UgxNvgnnpmA2OG4lVbyWZc7WGem","tlshash":"12d3127aaec7576a1dec10f0577836cde36a670bd9a95192213324fc4c7b0a70b684b2","first_seen":"2025-09-11T21:42:03.638508Z","last_seen":"2025-11-10T22:08:34.070283Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1121,"timings":{"blocked":1091,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/7e4352eb49dad04b797ce6b1c6a2e99dcd378f74.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/7e4352eb49dad04b797ce6b1c6a2e99dcd378f74.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 34333\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1866E9EDB7DCF9CA\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 6653\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zArI20pIoJwymhJx4gGz79fxzs6JD4whGr%2BGRzLGd567f14AH8%2B7S7fOKkxHqoHYdhIxCrjdrBqP8Wq0mI74z1tas7EpCHBgH%2BQ8XYpU\"}]}\r\nCF-RAY: 9896e3a7ab7265f0-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34333,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"3a08bf816dbe5d58df213c6f4fd77177","sha1":"cf2600b0891b717f47bdbc2d53523e17cc7065c9","sha256":"d912d5fa092dc49b9fc1e27afc82f40a6ae1ee0dc16736eef37ddcb6b6fc5fcd","sha512":"0f2db5c4f8d978104fa7faeef9b30b6860166c128c32303f98046da3bf6232efe6cab366f7db93264713819ebc0ca2716f4992c60b0e486b8f1e6c2fcc632d20","ssdeep":"768:MjR1nsLnaKILL30CAgSUsDL6qrEbn9uxJHxHPI:s1sbSXRHmJ2","tlshash":"a1f2f1fd133917ca5c5fbc4062e11274edef0b748380d9c3a9b6c5b970ae9589683e68","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-03-01T21:47:53.39896Z","times_seen":65,"resource_available":false,"data":null}},"time_used":1720,"timings":{"blocked":1692,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Bk3Jmydq.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/Bk3Jmydq.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/CAMO0y_7.js\r\nCookie: __ddg8_=ACeYYLIdSVmyOMzI; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=0DG1RuXUJw4JEUX8; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-189d\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":6301,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (6300)","md5":"6052c7f84404b88299065ae89596b637","sha1":"e71bdbacb60eed02d960d6a5369fe5c23a1ac3e3","sha256":"688a86e03c476d460e3661f53a1e65b9a61894c1bb136a9b53275b1eeea01811","sha512":"6eb207949e4a1c2150f1f5875544402853cc6234b5c1183806fc09c367a57b6aeefd1b12bc080539160066f1c2b2ffdc08488e69973cf4fb79ad8b2a0c214ea8","ssdeep":"192:9cioNBART9rJ8zUGmZsWF+az025j/Txw/sO5DwZln:9ciooRlJ8HmZsWF+az025cDun","tlshash":"8ed10a4ff4444479d3b248e9a44969c393220bea624090f3913cdc3a3718e69675dfea","first_seen":"2025-10-04T05:11:03.314319Z","last_seen":"2025-10-04T22:06:20.781433Z","times_seen":3,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/logo.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:26.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=bzfSX9mw9N9VCTPX; __ddg10_=1759615525; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ykhgunFMk9miEOLE; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg10_=1759615526; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-5f5\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1525,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"90c2e8c0d206d5eaeac1b5660a865926","sha1":"fe0386bf75d653fbacf2638c0dfe63544acc878b","sha256":"68da6ba7e3c1d4c39c888f4cfef2e3090ae95b091ef2b0bc1e6b638a3f2e523d","sha512":"1912a93b523c285d3ea1da9831b45240b5a6e5ddaacb2922b9b35c346beca192b37ce9881b7120fd215d1ff7087b732df496026f5bb49ae424ea1c27a0433545","ssdeep":"","tlshash":"c0315ee2b3a9d38191080f00834e7864032f15e9a710818ddbd76ba579b526fcc3d8d0","first_seen":"2024-12-10T17:19:34.101377Z","last_seen":"2026-05-26T01:50:54.168263Z","times_seen":69,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/w_DUq-AR.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/w_DUq-AR.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C72coOWc.js\r\nCookie: __ddg8_=QTv0NOnNCsLmc82E; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Eo2EjWbSpgOmZ5uS; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-15051\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 26103\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86097,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4c6bce4ff408842b72be9810227b096a","sha1":"905b7ba6378ad365efc082783bc72ba90e804a34","sha256":"e8f8fa31e74b47742d52f5f9aebbd3220463ea110c472a0bf6d1bc44e4ea2d7a","sha512":"b2f00a387d36eb615467a74c0679c2fedac31af75325f6add5028027e538b0b419612738c6839d82cdc92a97c478d3a7da6657ccfa994d5a43fc7e8e67259bac","ssdeep":"1536:XK6l28I8DZzkXhvPS5uLEiMAa73hBlxvHB+CIdzkVXiA6w+EV93mBE09:66nCvPS5uZS8a9Q","tlshash":"c7832989f224b57782f75aca8376c20172a54984b809d4e4b0ed4d7b496e95c03afffc","first_seen":"2025-10-04T05:11:03.612073Z","last_seen":"2025-10-07T18:16:30.104994Z","times_seen":8,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/ls-cdn.amplitude/analytics-browser-2.6.2-beta.0-min.js.gz","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /ls-cdn.amplitude/analytics-browser-2.6.2-beta.0-min.js.gz HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=7fW6f4jk6U5hq5yD; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=sN2YSnYNTS011SBx; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Mar 2024 00:42:57 GMT\r\netag: W/\"7300cb5f3b4294338b104c0f3268002f\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nx-amz-version-id: IogUhwUfPmM04el12d60iABuuT4mFuey\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: AMS58-P6\r\nx-amz-cf-id: qUZlOwEk4ippdB0JPlTrQEynWKwlW0dA864jWiQfkR5SerhDGM1f_w==\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 17648\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":66596,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a81d9804ed47201de5314a7110e680be","sha1":"df58e208599843e46894e9c2bbfdf2feb2a985a5","sha256":"59dd69f4230f7535182747c17235fe4526d34826a142498485779bfdb5d617f1","sha512":"2c15805effa726a40e1b3156d003df4b5f602ab4c1b09b8897ff759d143c0a33a5eb7cc90887b850b1f209ccb05b7be263935ad805ad86383f88947d777fdb42","ssdeep":"768:p6wmsZPARRFO/J6zZsideR53I+dte7I4GWyihZurBJ8:/msY4/JceR54+zeU4GWyaZudq","tlshash":"f35372c9f6cbf0250393a5b8907f140ab33e7e9d242d4428f626d9d53c6d6499233bb9","first_seen":"2025-03-26T18:10:08.318249Z","last_seen":"2026-06-26T20:23:29.909592Z","times_seen":142,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/analytics/pv?pgi=GTM-KN757LMM","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"POST /analytics/pv?pgi=GTM-KN757LMM HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 487\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=rcfaakZ2zXEo1XFl; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1YfJ6QXlpQNCHNTv; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/se0nEqBJ.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/se0nEqBJ.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=e693VLwdJtJULGR9; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fTmkpLlppPFO2wzC; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-603\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 854\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1539,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1538)","md5":"45b84c2348d774f82d8c590b4fd62b61","sha1":"4cfe5c94be3b912aa45239c0ec16bbaf18e7d144","sha256":"d2aef44d67affd4beae60ae1146555d727c47a39613078bfd3282ac6cf7a03dc","sha512":"a2d49407527b6f3dc77cdcde891b7be568b9c4024690683281b20cf17b76d0ba7788574d7bcd1d04a18a025956984b11a70bea7262c899288ce06ed28c8df8fa","ssdeep":"","tlshash":"f431320c380960bb239253e094de044ee258bd617a6bc4c5e2cc7d677d27599dc8efad","first_seen":"2025-10-04T05:11:03.407247Z","last_seen":"2025-10-07T18:16:30.088067Z","times_seen":8,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/tournaments/banner-bg-desktop.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/tournaments/banner-bg-desktop.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/Home.puxSNRNF.css\r\nCookie: __ddg8_=3cSQAEPVUoQw1bC3; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=pCZiP49I7B2j14hh; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-673\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1651,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c02768642950741c2a8d0e39f8d412e0","sha1":"118f935a0df15e0ac81aea94278cdb9becf7e2da","sha256":"3770b25538633725c3d38f810216e8e5f7404271db7f0d2c8b0451c1c8c3d537","sha512":"0b6902166f6e8a047afb84701de82dce41008465d70c73f01f0011eadfa53e0b0db1b381f346e5de57b20f806a23a8e154ef48eb8abefb190e0e215c66e7c472","ssdeep":"","tlshash":"c331dc7582ac7c1ee60dc64cc6eb4028221f41a3a3d1c5c072577b7e76384c52dbe36a","first_seen":"2025-08-09T06:39:59.150017Z","last_seen":"2026-04-15T02:03:05.874483Z","times_seen":62,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/loading.gif","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:26.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/loading.gif HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=ZD147zRyhIzGWfmm; __ddg10_=1759615526; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=V7CMOGvOZk5qmfnv; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg10_=1759615526; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: image/gif\r\ncontent-length: 11144\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: \"68df7ca2-2b88\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":11144,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 64 x 64","md5":"e4d96bb51227829e536412e5392bdf74","sha1":"8bf350e63f7bc86615cdccc6d16e0c8abb00584a","sha256":"d2911698581f2b0f538c0d770d1b677ecad7b9e61e99d89d1f218f9dae6c31cd","sha512":"a580b7ee3f1a213a523cc8ac69662809cd21bf0952aa2767ea1c3a8ddf934a3a34c4c578d34525d54ab027915aa9097894545713f135126bb8cf7f280b8ab0e6","ssdeep":"192:Yx1zq53A3H8YLSfEdDNsS+4tygrQFFpslGsTg1z4cWl:MH38WdDNk4Ygkrmwj5Wl","tlshash":"5a326d2c1ca447e6e927463165dba2cb8811df2d226c18d39eac347fb95b23ee0dcd10","first_seen":"2024-12-10T17:19:34.10667Z","last_seen":"2026-01-21T08:18:56.850207Z","times_seen":57,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/ext/cdp-customer//v1/projects/233e4c5f9379d04ec864/settings","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /ext/cdp-customer//v1/projects/233e4c5f9379d04ec864/settings HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwch64x.life/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=rcfaakZ2zXEo1XFl; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=bzndxAFXAKAwOJIY; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nservice-worker-allowed: off\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":271,"size_decoded":0,"mime_type":"text/javascript","magic":"JSON text data","md5":"12c4ca482e1b7bf40375503843b5f997","sha1":"49d40faea70af1183b0ffb901b2a31da7df67e00","sha256":"3476d8f31024437417c5f09513e2917124968baedbe03b67e65610ab25bc6b11","sha512":"2ea63ebe73591d6db25a6ab54c245b29b4eed22ec8827abc39b4db69b79207dd04689cd6a9257ff94145ced2358ff3e66a31e8e6aa672805960387df8e5e4e26","ssdeep":"","tlshash":"6fd0c28c25701dfa88d16e798b9c5809b5cfd62d50a59b097574cd800dc08f82a246b4","first_seen":"2025-08-09T06:39:59.043609Z","last_seen":"2026-04-06T22:48:49.753298Z","times_seen":65,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/statsGames?limit=4","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"GET /games/casino/statsGames?limit=4 HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=yhiXtNIxqC1YP3jq; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg1_=77ho3Q5ZPA9Twd2KNES9; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 88\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: c1d95d87-230a-44e1-8622-82cef2620d06\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5726,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e7d76aefb3e2e2eaf658d40e043e3d93","sha1":"c57cc19eb23453225bc4b8261641f76904b71939","sha256":"8a1c4fdc335b0d4cc4f160c02154e4bb36f98480fa0ad48b7368e017a9b3ecd1","sha512":"2097c5b4dc51272f3342507bd96a579f2b23772db8adb05c5d603dad684cf59a836354c7948926f12d4381aa71f32b3cfdc5d1d12f50e45cf8a6af9a4c951555","ssdeep":"96:qRKv7agpR9ZQA/+9lKvWb9KR9ZQASqIL9BTb9cKvbMhqIL9BlGok4GcMruc0qocN:97f929M26vc9vLIQc91kxcZcpoc8cN","tlshash":"8ac13411a58825fb0ff26bd8dd5b7ee40ad9002741a4f567f0f1da1870e21fa351aa27","first_seen":"2025-10-04T22:06:20.787078Z","last_seen":"2025-10-04T22:06:20.787078Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Block.BmfZjCRN.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/Block.BmfZjCRN.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=9l4jof0J2NaQ6Zdg; __ddg10_=1759615530; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=R7CfAjxEscIColWr; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-1fc0\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8128,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8127)","md5":"aaba565b87861612f171a488ec027467","sha1":"9bb1edeeeccc6ad50e808fdb1aaa19f083dd63b6","sha256":"70eb4b3e51962e2b84efa50a7cc0227f804590e3d19b881d6b74378fecd84877","sha512":"6b17feb089aa1e1dafc8424302a2ada9e5e0217a425ac8ef07b7032b86c76b09b93d93253c13803e5af0489833fad9b9604069de3854fb419f3869a2d9198264","ssdeep":"192:2Wr6voZIjNwVL+3kukfoc+7iv9QDx+3s2EoMmpt6rtp6cqSVkavcyj:2Wr6voujNwVL+3kNfoc+7iFQDY3sHoMj","tlshash":"86f1ec31336ae4f9b13bcb336d826e4a201be30b663757a8fd145869e89f193361134d","first_seen":"2025-09-09T11:33:29.110692Z","last_seen":"2025-10-14T04:24:50.383004Z","times_seen":7,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/C145BBQ-.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/C145BBQ-.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/CkMSVCQx.js\r\nCookie: __ddg8_=okhxqzG8algqbAWO; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=uTjpvYtGqW5QTUIp; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-448\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1096,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (776)","md5":"333b4734051445b3fdf1d0fd82e46e1c","sha1":"cdff10d1f25d68ae952f461c687ba44efe5a93b2","sha256":"d5f4fcda16e2bc61f9061799461d4e8f175106601a7cc1b2fd53494e0ea5cb4f","sha512":"1374fed8cadaea823dde70a4101e73c40dacdb9e3f76e2732b4a1ecfeed8759c93f2dd4520d1b4a1a67fe95e70b2c45b8af381f54de0a5ddae1f193264eb214d","ssdeep":"","tlshash":"b811fccf80d488f8a04d8ef88d31585906e81abaa3fda486c29c0a6552b2029e189327","first_seen":"2025-10-04T05:11:03.36469Z","last_seen":"2025-10-04T22:06:20.788718Z","times_seen":3,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/default.0Z-hrgpm.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/default.0Z-hrgpm.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=B5H6yhzgQSlDoOPC; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-b495\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 5\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 7533\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":46229,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (46228)","md5":"87f35b3ae9a4a2498c3d3e43fefa4d55","sha1":"05b23a7b14fc1e1e5a0ff9038a182a3f671d0723","sha256":"447918c8ea5df2d6d6a956b41bff24ce4b3caa7e5a1fab8d1acc20bba7d7b3d9","sha512":"1bc2892e95efe283b77173a9bdd47e9de3e26fcc00ff14d405ba9e85a6575f19698c8ec0499600291d4a2d91a4896906a795aef37b2c67f7d4930215070b4634","ssdeep":"384:G0jQN6Dc0cWJ7Hv0Dyikxb4v0DyiSft3JnymteZFcy/xqFnMRfv6rfD:LrtHvkQGvkU6PDwSM","tlshash":"90236621771c607cb53bc9a2b490169e2039f707d5239faeed693629c9c71d32b627c8","first_seen":"2025-10-04T05:11:03.495513Z","last_seen":"2025-10-07T18:16:30.109244Z","times_seen":8,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/q3LSfRvN.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/q3LSfRvN.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=007COD25tAJiNYB8; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-1896\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 5\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 3076\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":6294,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6293)","md5":"aabcaf406092d2abfaf2865f8d6c345d","sha1":"dff4a863c03268754af54820528972e654b1b835","sha256":"3f9400210e7096afbc7663147fe16f41f85982ac363d1c8506040c5b38572ca2","sha512":"f9af6f7a796692d9ac07af0d7f8e19762d1fb44cf80af21335aaca29f928c5008d33e2156c039095e45a8590d25edf2bdb42d2dec34d2314d057f02001b773a2","ssdeep":"192:PpazyEaxrcxshi0pM3bumtmRNwDA8T4uC3/bR5AmMbgj9ak9rLX:xazyEaZcxshi0+SPQDvk/F5rMS9aeP","tlshash":"30d11bccb4a67021b3774ae5d0b78107763829a134cbd4e1e01eded73e15a62a792d8d","first_seen":"2025-10-04T05:11:03.316834Z","last_seen":"2025-10-07T18:16:30.09229Z","times_seen":8,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/cryptojs-aes.min.js?v=1","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:26.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /cryptojs-aes.min.js?v=1 HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=bzfSX9mw9N9VCTPX; __ddg10_=1759615525; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=GffkBXpB3LBe60a5; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg10_=1759615526; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca2-359a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":13722,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (629)","md5":"cd93b7f0987a614bc17698503bcb6af9","sha1":"68a66448326499ff34c75bf31e2769b278584e0c","sha256":"8d4fae1a37a5b5338c889d0897b50024194b4d3ae94940e7e42c1c1423a1183e","sha512":"e3b87dfe10c0e3f3d801a85ae9c654a74eac22c2a93a757568a0d2b13755c36aeb5f9337e94a21db4ef2d1f0f1cfb98fccbbb0151d5cdf8d967730df96bfde98","ssdeep":"192:9BIGDmDm90mP9z8Ui015lN1I5rI2Tru6hMJFmHV+mdpwIfyAaYfKnNVYkUUFJZm3:9yiB0ez8UiIX1SrTegsEHJuI+y8Z7AX","tlshash":"625297c936edb94263963028587f6017b86b28b6945c4824f29cd4ddff9899dc03ae3c","first_seen":"2024-11-30T18:08:34.076577Z","last_seen":"2026-06-26T20:23:29.818692Z","times_seen":1206,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CjIjlGq-.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/CjIjlGq-.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=8Ts3zEx2DjVR8E68; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=M5fhBQnQHSXnRML2; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-9ce4\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 13011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":40164,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"8536f2f542c30c3b37aa68fa9d57f5cb","sha1":"4679e0eb2b374266ccf64bfc73ac98dad5143a1d","sha256":"84a0b743a7ef37e6cd2a2db660b4b5899c3fecce9d1f28502709614fc9d191fa","sha512":"126dd430ac683507fae1c2a1e11c5ff94a9015441798342ca77791fe29709b30c33f8b30ff1b10b1f08b51fac27d016fed4b2f8e724afb82dd8b57c2fbc7fbfd","ssdeep":"768:kC43aMGeQtDCPB/HyzE0qct7yxP2C7dSlSxkPut06BcftOashQWEhQEq/iiB8faZ:760xiywcV64IX","tlshash":"e303f8c8b2a0506583e2a1a390750203f33999153409855cbb2ceefbad7eeda7177f75","first_seen":"2025-08-19T01:32:32.322521Z","last_seen":"2026-04-26T08:04:42.226428Z","times_seen":67,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DxTym_EP.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/DxTym_EP.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C72coOWc.js\r\nCookie: __ddg8_=QTv0NOnNCsLmc82E; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Zg477Efn0qS1RwJe; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-142c\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 2073\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5164,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5163)","md5":"a86bd43371591230ada5d1456dab8aa0","sha1":"b63e835649ce8bec3af500a596a7a1f58272afb2","sha256":"23ec8c94b2d36cce2ca68ad1e07e75f81b886d3d0077acde44ee2f5981e3ca10","sha512":"c2f22c55f07b8c50d90c20493fc7dc2b4ed68615b8adca2c23cbb0c8439285544b86a623e919ed65f23f8dd6202d553dab85551ce8953e3e9c963b24ff059899","ssdeep":"96:oeyq53hKMoKMj1W3FdeF31f5HnPx1oRstVCBR4Ir8Dtgjiby+qUECPRv5:o83BY1W3eFFvmQVCkIgJbtD","tlshash":"f5b1a7e4b1d9e09bb7b64fd1c032225260076ba57434f0d0f27aad73215be54a562b3f","first_seen":"2025-10-04T05:11:03.300471Z","last_seen":"2025-10-07T18:16:30.054069Z","times_seen":8,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/middleware/mirror","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"OPTIONS /middleware/mirror HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,region\r\nReferer: https://gwch64x.life/\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=IXizz7f0VEfsnyHm; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg1_=r6oKG85b4ZvY64tcrgYK; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type,region\r\naccess-control-max-age: 86400\r\nx-request-id: e41dd0c4-9e7e-4965-b77e-ccf51ebdc5d0\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/images/files.svg","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /v/images/files.svg HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:30 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 11762\r\nLast-Modified: Mon, 29 Sep 2025 21:14:19 GMT\r\nConnection: keep-alive\r\nETag: \"68daf6ab-2df2\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11762,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a05b040566ca5377535a07f94adb66ac","sha1":"fd3d544bf14f3c9ad33f6c9d17a861371d7b684d","sha256":"e85418c502fc12e921c30c21ab3c5ab58dd063e19b73fa231bd0d7bec2a605a7","sha512":"346d1a3979f32959851081a764e87950a602560638e9f87594569c395b6347844338faebaf8016982e269134978867497ad4152e6e4cd86ad681e61f09f21730","ssdeep":"192:y3IN8A3nLn/NTLpsCPeweE/c+okq+eRuDUfMYzLnoP+VhwOwyHN2ELrh:wIN8uLFUOom4zLnoPqhwVQhXh","tlshash":"0b321bb23efe2a843ef19e75852073f59cf1bd152485d22688da7202313364c8e9e5f9","first_seen":"2023-11-18T23:23:23Z","last_seen":"2026-08-02T00:07:57.692137Z","times_seen":1797,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":130,"dns":0,"connect":43,"send":0,"wait":43,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/tmQUmTozn4rL6eTyx5nXvan0x5G4IxyRqRqZ6exj.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/tmQUmTozn4rL6eTyx5nXvan0x5G4IxyRqRqZ6exj.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/webp\r\nContent-Length: 38928\r\nConnection: keep-alive\r\nlast-modified: Tue, 08 Apr 2025 10:07:29 GMT\r\nx-rgw-object-type: Normal\r\netag: \"5f730560307bd52cce886d2e57f9e088\"\r\nx-amz-request-id: tx00000423202b539d8b1d0-006867c79a-162d5ff72-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":38928,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f730560307bd52cce886d2e57f9e088","sha1":"2f596a3c38ed0bdca79801fb1a16de255ca19319","sha256":"07ae82d1a13c9a7115e42c69a39702959079e97a7d37958c7621f41ec538015b","sha512":"1c84aca9647ab03f2810cd280b484c307f9b4aef9ca351decb6a63aead79ac1e0521fa4fa7227ac9655a573812d46d7b15d164b22c0df48d17035235af1c0bec","ssdeep":"768:wCwztLST7Nd0we1wkvmZqFzDZ+KvTORnKhdJmEw:OztczswemZqFn1v4nu6Ew","tlshash":"c703f119e216ea4874a62dda74ea8c6ed43360feba4c1e13dfb0b5e991d30725b2c150","first_seen":"2025-09-09T11:33:29.151798Z","last_seen":"2025-11-28T02:25:21.280898Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1198,"timings":{"blocked":1170,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/b3a22c28284e4de69efb358940838cb1.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/PragmaticPlay/b3a22c28284e4de69efb358940838cb1.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 22629\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"e063043198233d315d572492e46b0516\"\r\nlast-modified: Mon, 06 Jan 2025 19:17:17 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1851605C196F7B76\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 3151\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MVCElRXR%2FFyXieoBK43uDFI2IUR3O0L6GHrYlEjJ%2B%2BoNJpiEegJ3%2F43f3bMm71oYtB0nfu7JpSYF4mdWwSDUVxnUWIb1%2FDJbVp4IwMxE\"}]}\r\nCF-RAY: 9897ee92fa70751f-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22629,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"e063043198233d315d572492e46b0516","sha1":"e719c1b648675987debfc36d652ad543a0104edd","sha256":"3890d4a4521ac5f03aa3f52073bb54ba382fab3d29dbc132a03b21d78041e596","sha512":"2fa66a1b86378d099a1a1dd6195c0859c4db448239089650d325030d3e1d9f40135507058032090002f10c29e8525417f4986e2bc3c52cda0c42115942009600","ssdeep":"384:dR1fjI9hXHBNC87F+rrzecc+93runTssJX+LoIjgyv8XeLJq+CNZBxKIgahpzf:b1fEBNL5CrzLCnYlb8XsJqTZBx1Rzzf","tlshash":"75a2e146cb23bad09ba52d5a6d84fa7b40cd95efcd0b29005125ef502d1e5e13dffa04","first_seen":"2025-03-21T05:40:08.943093Z","last_seen":"2026-02-25T19:06:54.159546Z","times_seen":31,"resource_available":false,"data":null}},"time_used":1745,"timings":{"blocked":1718,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/button.php","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:26.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /button.php HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:26 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\nX-Webim-Version: 10.7.130\r\nEtag: \"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-08-15T10:47:56.403309Z","times_seen":96812,"resource_available":true,"data":null}},"time_used":462,"timings":{"blocked":210,"dns":68,"connect":42,"send":0,"wait":41,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/ui-resources.php?location=default\u0026mode=desktop\u0026lang=ru\u00269ae4a29f\u0026callback=getWebimUIResourcesCallback","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /v/ui-resources.php?location=default\u0026mode=desktop\u0026lang=ru\u00269ae4a29f\u0026callback=getWebimUIResourcesCallback HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:29 GMT\r\nContent-Type: application/x-javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Mon, 29 Sep 2025 21:14:19 GMT\r\nX-Cache: HIT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":625730,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"exported SGML document, ASCII text, with very long lines (65536), with no line terminators","md5":"11b438f338bd2b9e4671ecd18c16989c","sha1":"438b66fdfd873ff5f47c57bbaacd3ae1b0eeae27","sha256":"226f3be66a9d2f9f6a3bdad6e3e280a292f0d9bf7cce15fc382cb023bad866a3","sha512":"a6fba66b9240a4fec3298822e71776454c9ce66287af73b2839eeb18819b0af53f0076f22afbeba1c7477028333d5b07bcf5fa0d8a7fcf99c3fa355ae50bc800","ssdeep":"1536:QQHOcWqV61g4iy5VkMN2KQRgME234Cs57h7Fbsas1sUs+s1seT5Ggr6uN+Y3L5i4:cMCvyawQJ3gy5f9uZS44WkHD","tlshash":"dfd4270feed21469be2bee6361f70655713d34a29590079cb22f34de5f81ce29322b64","first_seen":"2025-10-04T05:11:03.45314Z","last_seen":"2025-10-09T10:23:07.246583Z","times_seen":7,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/5878c98bf96de5c3ecb4fa37ddb45928da161525.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/PragmaticPlay/5878c98bf96de5c3ecb4fa37ddb45928da161525.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 23925\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"e6531c0c47e53a6a9001584a0194da73\"\r\nlast-modified: Mon, 06 Jan 2025 19:16:47 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18507266D278FE66\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 1620\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8z0p5pOjCH8UcQhW%2FI8gnGD4IUDiSCnI4km%2B3fWKptHshuSfjSooHGPfo65EZph2M9J6uLtrwZEMMw94BVJNM2r3E%2BJ%2ByMYwU02mK32y\"}]}\r\nCF-RAY: 9897b6a54ba0bd9c-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":23925,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"e6531c0c47e53a6a9001584a0194da73","sha1":"9030997b339b418d7c3b8bf99eca4a7d28330ed1","sha256":"f88d4515fda6c8f1caea76b6ee1adedf6b613a24c8bba1751675fe6ba8625b7f","sha512":"908bd49718f2e979f6d0465d9d17533d1a7d3642e8161281c5968dc52f456cda5a4c188fa5d25b6cf8217fa9f0f530b6558e67415d7083471a4c9528faf3221c","ssdeep":"384:mL/RpeeVLdRQgRMGMIKG53P6qL4opDGjHWV5sBi/SPIxqlKL8/KbAujLRFqR3vmH:mLpgeVLdRQOZ3Sq/YH5BusIUlC8iMuBh","tlshash":"d4b2e1e651544f58c4fe3e774f0da4591cfe81e36e26a09deaad41b7a33ec20968d2c0","first_seen":"2025-03-18T06:51:28.240368Z","last_seen":"2026-03-01T21:47:53.269507Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1706,"timings":{"blocked":-1,"dns":1585,"connect":29,"send":0,"wait":55,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/d031c4d6f72635085180f480822ac041/RetroGaming/3bf9b96590bc3b69d13dfdd9152d1f9afb32b041.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/d031c4d6f72635085180f480822ac041/RetroGaming/3bf9b96590bc3b69d13dfdd9152d1f9afb32b041.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 30511\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"a8310215cc3e47240675c72b666b27ca\"\r\nlast-modified: Fri, 03 Oct 2025 06:19:48 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 186AEDF70D70C56E\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 4821\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lPQnI2AQ63bUYM%2BGG64h%2FyyhfddSoPxmZuWQU9tRrPJxayi8pNQswLWjOaCIiUTBGtNtE%2BumQpKMLG0uzys1asigbhWTJ0Bm2X6TIqFS\"}]}\r\nCF-RAY: 9897d6c188cb4e96-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30511,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"a8310215cc3e47240675c72b666b27ca","sha1":"a023efd6a25441bacb13b2d87554977b5d962f9a","sha256":"c5b2b01d326b1646f218c24a676323542b2417e97740bb4c0aeafd801f5fc699","sha512":"1aa5207c4c0dbd5d00e413174ad0d8914649c1af03fef6f96501986eb5ae4f5d6a25a4b5102ab800743e7b8d28f52eef95c436571be247df83c0a795844eb3a3","ssdeep":"768:pt4a9yaV1N3Zysfa1vJGz2+mQI8ebX84bmNXWFq4vI44Yhcwh:poCkWFa+mQcbM3H4nnKy","tlshash":"54d2f173147ed80ebbd3caabc0359bb9b1968192a207b65f4570ef9191e04bb6038374","first_seen":"2025-10-04T05:11:03.674429Z","last_seen":"2025-10-04T22:06:20.796146Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1738,"timings":{"blocked":1709,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/playson.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/playson.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=pdKFjHgZW0r096nh; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-4b6\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5c779d57bcec0fe4d42e108b4f34c15f","sha1":"40e4c6d78d1a92f13deee6ff8291df1a84c2de61","sha256":"6903bea0047248cef50e6c09312dcf1df8f26ef511c10fd4f22bb7c9c7580494","sha512":"51ec89c6412be1df2d784b1368a1797067e248946c29eb545d9914bc3884552ee0a7d9bb1834f4ec7ba1ccafde38ffce918d2dbc04a49d7aff1a52dcb357422b","ssdeep":"","tlshash":"392151ebf39da7d0ed048320c82dd97840a678be7f58a39d43d0ecb2e41a85e1c48c80","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.866029Z","times_seen":70,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-04T22:05:25.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=bzfSX9mw9N9VCTPX; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:25 GMT\n__ddg10_=1759615525; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:25 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:25 GMT\n__ddg1_=PwjVluYMnsf82WiYGvoz; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:25 GMT\ni18n_redirected=en; Path=/; Expires=Sun, 04 Oct 2026 22:05:25 GMT; SameSite=Lax\nuserVersion=45.10.240.51; Max-Age=86400; Path=/\nuserBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; Max-Age=86400; Path=/\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:25 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Nuxt\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":404308,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65063)","md5":"186280b40781c9d4bd1e283795d976ba","sha1":"e7d561bef334dc76a4196bd5709e22e405be1e42","sha256":"1fb00c5d2039afdad23f4a7717ce64fc7d77f955f06afac25547350d36bcf34a","sha512":"0b6b262b61b2988ff2a9acc6421c598c20b5775de00ef2f11203fa35d59f737630ec604b15653c438972646c62795928dfe96176e0797b6dd5e54c78cd38d9e6","ssdeep":"3072:7JYXSbqAfuybg1s705YOwfwONtsEb2F61UbFDT:HbqAfB705YOwo4tsEb2Fhp","tlshash":"5d84d5d36630342ea16fd457f1a1eed8f434a815d31367ebf1e61a25cbc2c861663a38","first_seen":"2025-10-04T22:06:20.798017Z","last_seen":"2025-10-04T22:06:20.798017Z","times_seen":1,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":150,"dns":20,"connect":25,"send":0,"wait":230,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DxTym_EP.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/DxTym_EP.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=007COD25tAJiNYB8; __ddg10_=1759615532; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=W3TxWQiDwtvpOVTa; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-142c\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 5\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 2073\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5164,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5163)","md5":"a86bd43371591230ada5d1456dab8aa0","sha1":"b63e835649ce8bec3af500a596a7a1f58272afb2","sha256":"23ec8c94b2d36cce2ca68ad1e07e75f81b886d3d0077acde44ee2f5981e3ca10","sha512":"c2f22c55f07b8c50d90c20493fc7dc2b4ed68615b8adca2c23cbb0c8439285544b86a623e919ed65f23f8dd6202d553dab85551ce8953e3e9c963b24ff059899","ssdeep":"96:oeyq53hKMoKMj1W3FdeF31f5HnPx1oRstVCBR4Ir8Dtgjiby+qUECPRv5:o83BY1W3eFFvmQVCkIgJbtD","tlshash":"f5b1a7e4b1d9e09bb7b64fd1c032225260076ba57434f0d0f27aad73215be54a562b3f","first_seen":"2025-10-04T05:11:03.300471Z","last_seen":"2025-10-07T18:16:30.054069Z","times_seen":8,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":224,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/entry.B0BOi0i9.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/entry.B0BOi0i9.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=DXXp1CLk4NuY19tn; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=H7ICDYHQBKjqLx1k; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-1080\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 751\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4224,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4223)","md5":"61f0bd26cea7d117c5e7c486acc68d00","sha1":"6c8bcb0f1c4f0fb0f07276c5eacd898124ed10df","sha256":"f099b430b92e0f00145cb9382b4a9ae5fd988a1e4f4bfb3043e5a938efc4ee39","sha512":"f9bc1136e2349b7ac1471ec7801d8047312f950e30808796e33dcc45bdf4cc68b709d9a30c6ae3f2cc7371b4d47bd532b8cc59e09569e52f1d9a1b30cb0b91c2","ssdeep":"48:qBK1KVrwxo7yXr29OKJgbKA7cb2XYKBKJKeKbKaeEaSkeEnS0SSSWS8VSfHeEPeG:qxi8yK9RHN4MEBWWXIShv7JRhW4D/qi","tlshash":"4491ff7fb288f6580127ff02a4a15bddf42b23b0b2522a15f2d5523061b67d1bc29d7c","first_seen":"2024-05-30T05:56:49Z","last_seen":"2026-06-10T14:34:42.966261Z","times_seen":189,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/C72coOWc.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/C72coOWc.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/CkMSVCQx.js\r\nCookie: __ddg8_=jVCl8LCaih1ng8wG; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=QTv0NOnNCsLmc82E; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-56e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 862\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1390,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1389)","md5":"f3bc6cd8453440a2112d76ab82bf7bfd","sha1":"af19e1d374dc436237a39c274cc7162326a03096","sha256":"d2f31fedab9f60c9f48cc734c847add5835557c2d4aacbccc3d1ed8794562a8f","sha512":"7f68ed63cfcda6c55de267e2e26029838317ccf504652ff4c2659492711864100aa52eb5722688d7d6a65efef4897edf1bb6a1d9c8e4cbdf225971f1b8ac00f4","ssdeep":"","tlshash":"ec21fe4fd000d03941aa8df8e069a92163b352ef03e9d6b5d2ee0e750b80025c14db1b","first_seen":"2025-10-04T05:11:03.629959Z","last_seen":"2025-10-07T18:16:30.085382Z","times_seen":8,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/l/v/init?action=init","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"POST /l/v/init?action=init HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwch64x.life/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 179\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:30 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Webim-Version: 10.7.130\r\nAccess-Control-Allow-Origin: *\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1078,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f5d497371cd19d8ff9ffca3eb4722c24","sha1":"c047eefc8589ac5fdd5a3fadbec80a2e94595251","sha256":"5cceeb81f8290cebfdef3762d06c258209619a92b6d3fb7d358ce468dc6bfacd","sha512":"fd66ec2b39e6a34cd92a7f6b703ac9c5ab7ce30f7dd3fdaebc3eca4f4d5d0dc45ebcc54fde90cc8f5f6f1a05df6b6a0a3494f881afe85f811d98e58648c4d51f","ssdeep":"","tlshash":"dc11aba0d41504fb4ac2752e44b00ac7065cf223e34ead1ad9495865f3cfb366307fb1","first_seen":"2025-10-04T22:06:20.801641Z","last_seen":"2025-10-04T22:06:20.801641Z","times_seen":1,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":128,"dns":0,"connect":42,"send":0,"wait":45,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/lastBets","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"OPTIONS /games/casino/lastBets HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwch64x.life/\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YI6PjrTseHmSqECl; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg1_=zQFn1VaDczJwK4vmbea4; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: a63c7922-8e7a-4ae4-aa93-2156a4b7de2a\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/l/v/poll?action=poll","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:40.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"POST /l/v/poll?action=poll HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwch64x.life/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 174\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:40 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 2\r\nConnection: keep-alive\r\nX-Webim-Version: 10.7.130\r\nAccess-Control-Allow-Origin: *\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-15T10:42:45.734631Z","times_seen":760983,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/jXgXeeQE.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/jXgXeeQE.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/CkMSVCQx.js\r\nCookie: __ddg8_=jyTtDnazfXCVdlqw; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=lWCRXxB52iIyWv03; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-351fe\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 41848\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":217598,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (37705)","md5":"f84804da82d9c4cb7ddd9e71f0ca1f6b","sha1":"64c4e19b9eb6ea410c08dd63881ddd0cb318255d","sha256":"2c0d1951397683fbd5db45458698ddee96bc097d1c27017de3493bd092d4b841","sha512":"87c74f73697be0716dfc5d1a33ef2f121591b1c214a1e4e2ad5c778f0817a36c52fe0bbd776c8abbe36532eb8182a1be5d688e4a9103748744a2718d4b51e618","ssdeep":"6144:cCuayegAufVcvTgOg1msMr0Ouyfo8x326pl5OaPydoMbUCzxNeuGgSBm5uz:cCuayegAufVcvTgOg1msMr0Ouyfo8x3p","tlshash":"bf247e320e5d1cbd1111a166de1cab1a38de81fe3e9b93e107796e6e35f10309ea931d","first_seen":"2025-10-04T05:11:03.708279Z","last_seen":"2025-10-07T18:16:30.087249Z","times_seen":8,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/roboto-bold.BeRaP8H0.woff","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/roboto-bold.BeRaP8H0.woff HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=3cSQAEPVUoQw1bC3; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=bCmlZR9EUuqAqT39; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\ncontent-type: font/woff\r\ncontent-length: 141532\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: \"68df7ca1-228dc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141532,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 141532, version 1.0","md5":"ba3d7f35e4e84772d778ced098c5a40c","sha1":"248262cc71832afb331a103116b8a5f061693cc3","sha256":"7abf45d601fc5dbc8c482c9cf62916b8463b14d4d9a90e0b5888952401f784e5","sha512":"6cc5d27fdd4030a66cde525d52c9cfebc1a2caa3ebe10a49b538694cba096fdc7ea57f2c4a2ea153bd102885cdb9e92d8c5c129dc38251be93bc6426ada89a4b","ssdeep":"3072:4SGRte9oLIED5Zc02YQeQDKyY6s10mehsr4QIaw545V:2GYhX27e0Jl3s7Ii","tlshash":"fbd3229fd04ca4e2c57fb6e1c4e74ef0a5b53cb6d10e358f1292c9118207ab9e8e6649","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-04-25T06:32:47.439749Z","times_seen":64,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":93,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/OFVFsOqHyQ7LPBGQ02yyKuNTrG7q1sKDa2IDemOh.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/OFVFsOqHyQ7LPBGQ02yyKuNTrG7q1sKDa2IDemOh.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/webp\r\nContent-Length: 72604\r\nConnection: keep-alive\r\nlast-modified: Fri, 03 Oct 2025 10:46:23 GMT\r\nx-rgw-object-type: Normal\r\netag: \"227947110ed19c11df562b7d1d95099d\"\r\nx-amz-request-id: tx000003572cf7eb35eb1d5-0068dfa980-17717366a-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72604,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1380x736, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"227947110ed19c11df562b7d1d95099d","sha1":"c70e1973bbf40b9a476d0bce0a339330d67dbd3a","sha256":"6a0b057f5cc839d1a24ca31aa59f1ed85f161a8eb052dd406b06d740ae248697","sha512":"a13e46033857fdc9560369ee4d849c114e0c1421a193b2684c56bae34533998b13fc68dd1852fed3bcd92dd731ff8a001b995ffe1a09d13ec7937da949c59bcd","ssdeep":"1536:VVTpFKdWOrWiSTiV5s3Y6wNKUttKkG1A1UvmV/+sAAIfBRjw1MZ:VVKdWODSTvUnttx4ACv6+sA7Z","tlshash":"906302e30d647069bc143b08653e9429cd1ce34b05dc376177e8fed1e9a66c510e2dba","first_seen":"2025-10-04T05:11:03.521224Z","last_seen":"2025-10-09T10:23:07.307856Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1162,"timings":{"blocked":1134,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/blueprint.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/blueprint.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1u5vMac5Wu5SDP17; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-1ac1\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":6849,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"799a505a45ff7b99c4662d5de8e0e143","sha1":"a8133ce38ca74f81200a3764f4b5c86142304a73","sha256":"9633c2f351c615d520abc9db32b6123c98ccf00a0039700d62468ee45ee0a386","sha512":"4ba877b7ab2501c21d3c1ef383e2db99dcf4209c73d0f2f2754b79d823ccd05c21d1421558884b2037d96ec41c0569d643a260961d0e33c1092de8a03558085d","ssdeep":"192:cyxK+91V6I2jzn57EEr4k0Bj65ntvYXxuz:c091V6/pAdk0BHxq","tlshash":"75e151ed77dca2e0b109b7e4ca2ba874362734f63a72d90d43ea7d14862151e48ddcc9","first_seen":"2023-05-21T16:42:19Z","last_seen":"2026-04-15T02:03:05.894519Z","times_seen":68,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":179,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/se0nEqBJ.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/se0nEqBJ.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=8Ts3zEx2DjVR8E68; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=dNsSH58X4bRdiGup; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-603\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 854\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1539,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1538)","md5":"45b84c2348d774f82d8c590b4fd62b61","sha1":"4cfe5c94be3b912aa45239c0ec16bbaf18e7d144","sha256":"d2aef44d67affd4beae60ae1146555d727c47a39613078bfd3282ac6cf7a03dc","sha512":"a2d49407527b6f3dc77cdcde891b7be568b9c4024690683281b20cf17b76d0ba7788574d7bcd1d04a18a025956984b11a70bea7262c899288ce06ed28c8df8fa","ssdeep":"","tlshash":"f431320c380960bb239253e094de044ee258bd617a6bc4c5e2cc7d677d27599dc8efad","first_seen":"2025-10-04T05:11:03.407247Z","last_seen":"2025-10-07T18:16:30.088067Z","times_seen":8,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/button.php","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /button.php HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:28 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\nX-Webim-Version: 10.7.130\r\nEtag: \"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-08-15T10:47:56.403309Z","times_seen":96812,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?en=page_view\u0026dr=gwch64x.life\u0026dl=https%3A%2F%2Fgwch64x.life%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=329420501.1759615529\u0026dt=GET-X\u0026auid=515335589.1759615528\u0026navt=n\u0026npa=1\u0026gtm=45He5a20h2v9186219929za200zd9186219929xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480709~115616986~115834636~115834638\u0026tft=1759615528933\u0026tfd=1131\u0026apve=1\u0026apvf=f\u0026img=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:18 GMT","end":"Mon, 08 Dec 2025 08:34:17 GMT"},"fingerprint":{"sha1":"33:09:D4:D3:61:83:44:73:CF:04:5A:44:53:2E:B5:36:64:BB:FC:7F","sha256":"86:F0:16:7D:8B:24:BC:17:6C:2B:06:E6:05:A6:33:43:10:A0:61:A6:BA:81:FB:58:ED:0A:DC:0B:AE:5D:08:C6"}}},"request":{"raw":"GET /ccm/collect?en=page_view\u0026dr=gwch64x.life\u0026dl=https%3A%2F%2Fgwch64x.life%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=329420501.1759615529\u0026dt=GET-X\u0026auid=515335589.1759615528\u0026navt=n\u0026npa=1\u0026gtm=45He5a20h2v9186219929za200zd9186219929xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480709~115616986~115834636~115834638\u0026tft=1759615528933\u0026tfd=1131\u0026apve=1\u0026apvf=f\u0026img=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DRLB4-_R.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/DRLB4-_R.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=e693VLwdJtJULGR9; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=QvSpl27xzih9GrJ2; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-201\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 276\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":513,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (512)","md5":"edbd750ef08a3e40bd3f93ef00424804","sha1":"2910560cc99b8e5fcf85488d82a39cdc3d45c09c","sha256":"19c614190f4a1ff133dd089486879e169ff387fc1dcddaf2177eb99e03b86f4f","sha512":"78fb844b4a23955443ad1a90c1ece096cf92e30a1b05a64a80d332774ad2063a4491e18a2a2afc1788c7762670f8638d1833868ff05f3775eeedec6acf4fd290","ssdeep":"","tlshash":"d5f0508b1caa18941de65f779027b1d2337a516e01518085feb1e6c4a10759ef32f430","first_seen":"2025-10-04T05:11:03.352335Z","last_seen":"2025-10-07T18:16:30.062849Z","times_seen":8,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/lastBets","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"GET /games/casino/lastBets HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2zCiPJZuZqAElAGM; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg1_=WoWfIeYDQQ0lIAJ8jEFz; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 87\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: d30d04a6-a66a-4681-aacb-cdcd064c47f1\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1456,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"611dfb7185b5868ef342f4651caf04bb","sha1":"a89f11b4511bd8c208655bcc5bd245e50f5145e2","sha256":"c760e2ae51d6d6af8fefbaf9b684d883fb4d2759f8b1670e5e00ff1b7313ce9a","sha512":"3cfebbe02a8b0f84a05bbb8d66a3b0e5444f661b7968ca0fbe02431a4aca0ac249bd6c03d2e2d12ec32e28f8ccaef15143a3f762c6e6bbbfe0a1ccd39afb1483","ssdeep":"","tlshash":"2431a0e9799c5c9ee5500a605e0fbfd964cd291b128b4ed209dbec6887404f76690b33","first_seen":"2025-10-04T22:06:20.809157Z","last_seen":"2025-10-04T22:06:20.809157Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/Moc2h8VORWnranftbRqSbrUxd6utDoJtsYwUrg3y.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/Moc2h8VORWnranftbRqSbrUxd6utDoJtsYwUrg3y.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/webp\r\nContent-Length: 150782\r\nConnection: keep-alive\r\nlast-modified: Wed, 17 Sep 2025 06:05:56 GMT\r\nx-rgw-object-type: Normal\r\netag: \"56e52aa195168396d69114c5f05ababd\"\r\nx-amz-request-id: tx00000986ec49dbea41792-0068ca4fc6-173b8ac44-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150782,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2880x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"56e52aa195168396d69114c5f05ababd","sha1":"e549563512f47d36837e5646a44b35fd38a42079","sha256":"7d993d7db0e559338ca5e4072a43014b3f101d50c9d47cfe5a0eeff4f87b8afe","sha512":"aec4def5e45a608df5d6acc70508d9079cfd961bca73aceb5f961237c851ccf1b636941ce6fc1790b7f698cc68d2687c47b07bc8e04ec7f6c1b69e2d4dae36d5","ssdeep":"3072:GRxZj27LsAzRsfNiDTvegksuNBHHq7ML2Y/X6YRzYVgtYhcj1UY2xGnwh86kY3tS:8ZjcLHzkkDTUiUbKYdYVgtcmUPGq8zqk","tlshash":"f5e31260c9f530e0c9e468e9094bdbc2dc4b3c4358fb9d655d87aa5389361a1ce3ba4f","first_seen":"2025-10-04T05:11:03.577712Z","last_seen":"2026-03-01T21:47:53.370029Z","times_seen":24,"resource_available":false,"data":null}},"time_used":1121,"timings":{"blocked":1092,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/icons.CBEgwkkS.woff2?v=1629439516391","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/icons.CBEgwkkS.woff2?v=1629439516391 HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=YURsT9CwjiuslMow; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyOTU3MiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FzS9KAVOoIedfYN5; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 9324\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: \"68df7ca1-246c\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":9324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9324, version 1.0","md5":"fda09e7500d3a2867129d2ed80c57583","sha1":"d871428e4c47c45f3cd7232c489442943ed079ac","sha256":"fae8a414803516ee3ce7076358411be3ab4fdf1f68c8b9dee7e76802bd3aefc9","sha512":"94bae208ea5a0b8b9a6c04bd845247c59503852b42c32fa1a8e5833859dd963d3a1b26da5d3362babb5185206de0c05380fb3be080229284555f2e81d9f96485","ssdeep":"192:XlV9RVDfOg6KUzP++NzEsfO/aL+rNHxUQqj/qzT5SlrDuZYoh0:VV9RhfZ6DzP++tEsW/G+rNHxUQq2RAmW","tlshash":"8112cfbfb53be2a1e0f27d78141adb5259df317842fd0b781006313567f4b65a042532","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-06-26T20:23:29.819246Z","times_seen":134,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":128,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_ipx/f_webp,avif\u0026densities_1,2,3/img/vip/mainPage/money.webp","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_ipx/f_webp,avif\u0026densities_1,2,3/img/vip/mainPage/money.webp HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=axWMToMevviSY80o; __ddg10_=1759615530; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyOTU3MiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=78BQcQYV390kDRTe; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\ncontent-type: image/webp\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests;, default-src 'none'\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\ncache-control: max-age=60, public, s-maxage=60\r\netag: \"1bee-wA/H+k1e8UR2p5NlfOr42pBApbQ\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7150,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3e0d20f5a2d729dd27c8452b80b95939","sha1":"c00fc7fa4d5ef14476a793657ceaf8da9040a5b4","sha256":"a97c6079842b58ded77787a7935ff429197e357dbf2785663ead679716693dae","sha512":"db18664f988ee7046dd6098611e29780ca06ed2eaa4a538cbff5ff6698b5c17838a36d9f2ffe88851d8d8e764ab07808c604a7c441bca5dcf8f3a0613cff4c52","ssdeep":"192:rDnnDtMWC7QCQJ4NwSImgrL0Zj6q0xGkeYJIb:HDtMlQJ4NpkL0Zj65","tlshash":"a0e19e45042767e6d3572427fbad790772432b61de1c01c31d78fa768daa40f277c58a","first_seen":"2025-08-09T06:39:58.831335Z","last_seen":"2026-03-01T21:47:53.450168Z","times_seen":34,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/espressogames.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/espressogames.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=AH6tK4UH4DvHKtfd; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\nuserVersion=45.10.240.231; Max-Age=86400; Path=/\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: br\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3864,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"f9bc9f0b50c4720d23b7073393347994","sha1":"3af7a97a5920cf50d96107da3eee7cde205c3882","sha256":"4c8d13254c9620e0d1dfaf23652c6829800c21a7ab654f1a3e18c9053010c14b","sha512":"8986ac343180eb877ad94a4533b2f7c3dafab0feaddfe9088a711cbcea7e679d98880c614be0eb27422b2ae960a64d28de6dfa75bf6bce49b8139497db05c10b","ssdeep":"","tlshash":"fc8111ca01a71121a603a46a2bef060171948807e54bec127edd33cccfcb69897e378d","first_seen":"2025-08-29T06:11:20.964489Z","last_seen":"2025-10-09T10:23:07.278451Z","times_seen":8,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":190,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/C72coOWc.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:27.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/C72coOWc.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/CkMSVCQx.js\r\nCookie: __ddg8_=rNszKNoA9OnWOAxR; __ddg10_=1759615526; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=s3buOdmNGNHFp2Cg; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:27 GMT\n__ddg10_=1759615527; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:27 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-56e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1390,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1389)","md5":"f3bc6cd8453440a2112d76ab82bf7bfd","sha1":"af19e1d374dc436237a39c274cc7162326a03096","sha256":"d2f31fedab9f60c9f48cc734c847add5835557c2d4aacbccc3d1ed8794562a8f","sha512":"7f68ed63cfcda6c55de267e2e26029838317ccf504652ff4c2659492711864100aa52eb5722688d7d6a65efef4897edf1bb6a1d9c8e4cbdf225971f1b8ac00f4","ssdeep":"","tlshash":"ec21fe4fd000d03941aa8df8e069a92163b352ef03e9d6b5d2ee0e750b80025c14db1b","first_seen":"2025-10-04T05:11:03.629959Z","last_seen":"2025-10-07T18:16:30.085382Z","times_seen":8,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CIV1DmJm.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/CIV1DmJm.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=8Ts3zEx2DjVR8E68; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OzENJ6varDHGPEpU; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-36a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 438\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":874,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (873)","md5":"3bcb3cb731faa08f8e975f22576abf93","sha1":"05344c9790022a0d796fe682cfba3af36a0347db","sha256":"ee27ce8fd95c8b0501fb72850528edd31a3d0195819a462635ca117c897cc60f","sha512":"73d6c16f46985d8259360bab931cb67e77640c8585a6ef8df1950979b4eae173ae318c351dbd07548a5d6d4b28d596f35c41db8840566f386f52f61fd70fce23","ssdeep":"","tlshash":"0c118cc070a4a431c3b849c801d5abb2b55d96843de782d4e45e1d33213f89cc579b19","first_seen":"2025-10-04T05:11:03.497488Z","last_seen":"2025-10-07T18:16:30.088926Z","times_seen":8,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/api/v2/tracking/events","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"OPTIONS /api/v2/tracking/events HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: PUT\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://gwch64x.life/\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fFf56K5KKqeKso5x; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg1_=Xia5YALrfQKXJSRRd6vl; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 86400\r\nx-request-id: a5c0228d-0a1a-4bd4-b77e-f6c31a107d18\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/builds/meta/792665cc-f47f-4a2e-b850-f38f6638ee95.json","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/builds/meta/792665cc-f47f-4a2e-b850-f38f6638ee95.json HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwch64x.life/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=7fW6f4jk6U5hq5yD; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=AetXnQC94z3ALNTy; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:28 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-8b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":139,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c6d306a66f8ad6f6b13984e052ba324e","sha1":"2ce342871fd6cd25aa075cbeaefa49959fe9da18","sha256":"9640f306d4ff07ed13fa06f8fa06308fe72a35e667ae6193b955799177f748a4","sha512":"afa16558e0a1d03949a2990452947660f5f905e967df6d4b4c2d0c9957732d431df0d491a2db16f6bc1726e878977a947036eb6ff67e98bdae48cbcf48f750fc","ssdeep":"","tlshash":"84c02b32041480937d720953d40c3c74c1f64322893c2c74e3540f3d035c2cf2014017","first_seen":"2025-10-04T05:11:03.27339Z","last_seen":"2025-10-07T18:16:30.079315Z","times_seen":7,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VRDLWS0SHC\u0026cx=c\u0026gtm=4e5a20h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtag/js?id=G-VRDLWS0SHC\u0026cx=c\u0026gtm=4e5a20h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 04 Oct 2025 22:05:28 GMT\r\nexpires: Sat, 04 Oct 2025 22:05:28 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 129439\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":373653,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"46b7e4b06d24a105af6a96eb8d500752","sha1":"e8b7d74c27ccb9b9731fbab1eee729c3bbae369d","sha256":"04c7eb483b48b6c54a7ae6066e803530511a3e10d9c1502cce5e216e59952abe","sha512":"31f2601b255bfbee0d31831fbf81ecc3fc687cd3e5487a873d08e8bdaa9134951bec89573f66d6e3261107253a24eaf6f65b5cb8e8178213472f3979919a41ef","ssdeep":"6144:AOZTP5DyYvRCLdIuLXX3AAmozVqnRejNVj:PbdtvqdIbuj","tlshash":"638419cdb3c674665392a478903f018bb5bb68a2f44cc899f185dce42e74a9a4137f7c","first_seen":"2025-10-04T22:06:20.814862Z","last_seen":"2025-10-04T22:06:20.814862Z","times_seen":1,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/geo_ip","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"GET /geo_ip HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=W5hgjH1IqCHjjz1Y; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg1_=IUXKrX2lQqJsMfmu0Jzz; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: d883e36f-58b6-40e0-ad13-74cd6a4719b1\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f6012633389eb7898bb85ebf9c9c358d","sha1":"a71ced533d3ee0ec92c6bacb56847bab6a02d52b","sha256":"47b56fa48eecfc92c080023f0fc4634f502ff43b218b60f5a485e74c0f6a046a","sha512":"34858faf00ea706b57391885615cf7e76c1ba151da995aba730721a4b7c2543eb1aee451bec6c82378f3d02f6abefa36a3da1867c9ad45a3d5112cf5e3fd99e8","ssdeep":"","tlshash":"85d0a7982538dc6e5d6dc2d0552da25b76267420a1ce1a2691a28f60d0cd69f7065097","first_seen":"2025-10-04T05:11:03.516866Z","last_seen":"2025-10-04T22:06:20.81612Z","times_seen":3,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/ext/cdp-customer//v1/analytics-js/inAppPlugin.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /ext/cdp-customer//v1/analytics-js/inAppPlugin.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=iH71vJHYncPuEwkg; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iN6g3nk6GrE1GcKG; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\netag: W/43bc44026ca2117bf0438e53bb1919b7\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: public,max-age=300,immutable, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nservice-worker-allowed: off\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5580,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5580), with no line terminators","md5":"2b3f92234d8907a103ec9dc2b05589f1","sha1":"2f2c0961bace40551cc39d1728715b94ec82db2e","sha256":"ae91906abf85a449f6ec41c31f1bc77b9bd3505bb7e55d61760b47c3fb11e3dd","sha512":"62174308a9634879afda50af1511adf6af4081ae78910db5c71cc0bb764cfb2c287c659d8653268b4b1eba7e6eb76b7b8096c1416a28b069f19e38019a7d38a2","ssdeep":"96:frYe+t6Sgb0qKEIwRGBMtIPmcKhgbUk6HEHvRrVxEC7NTjQCtGf8J4HJDFqK/+bD:Nd7KOwBMtgLgHE7T864KKqKk","tlshash":"3cb1ec9df793f82c05f39a7de5773423923a3b026099e411e057cec2596838d6123bb9","first_seen":"2025-09-25T08:21:12.736151Z","last_seen":"2025-12-15T01:19:11.275667Z","times_seen":356,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/default.0Z-hrgpm.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/default.0Z-hrgpm.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=iH71vJHYncPuEwkg; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=a4BUeGnghPaJJLZP; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-b495\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 7533\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":46229,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (46228)","md5":"87f35b3ae9a4a2498c3d3e43fefa4d55","sha1":"05b23a7b14fc1e1e5a0ff9038a182a3f671d0723","sha256":"447918c8ea5df2d6d6a956b41bff24ce4b3caa7e5a1fab8d1acc20bba7d7b3d9","sha512":"1bc2892e95efe283b77173a9bdd47e9de3e26fcc00ff14d405ba9e85a6575f19698c8ec0499600291d4a2d91a4896906a795aef37b2c67f7d4930215070b4634","ssdeep":"384:G0jQN6Dc0cWJ7Hv0Dyikxb4v0DyiSft3JnymteZFcy/xqFnMRfv6rfD:LrtHvkQGvkU6PDwSM","tlshash":"90236621771c607cb53bc9a2b490169e2039f707d5239faeed693629c9c71d32b627c8","first_seen":"2025-10-04T05:11:03.495513Z","last_seen":"2025-10-07T18:16:30.109244Z","times_seen":8,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Bo795GQm.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/Bo795GQm.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C72coOWc.js\r\nCookie: __ddg8_=QTv0NOnNCsLmc82E; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=L86TZmTyeOY1Nl30; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-11d\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 206\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":285,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"a223b34c3cdb6967c1095dc0a28a2b7c","sha1":"1959829472750c79c3b7cd33480ea6f383d6b9db","sha256":"5c8ee49059757cb7f107a35fcbff4e413488a00cd8068c8aad9e54cf53c91db6","sha512":"567feb951deb89ec211671f30b2ab5ca4c2b7c53faadb151ca813d5b6508a293037b5e4d794e0d49dc896fbe38b53cccca5caaed64f770b6b33e9e253f075956","ssdeep":"","tlshash":"2ed02bceeb7066b4bb10455d509bc752c728f90012a86ac1987b6ea13f109c6c346fe2","first_seen":"2025-10-04T05:11:03.526688Z","last_seen":"2025-10-07T18:16:30.08633Z","times_seen":8,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":28,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/api/v2/tracking/events","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"PUT /api/v2/tracking/events HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 102\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"PUT"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=eGMHpgzBxIQHvTtt; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg1_=sg6UYaKSPhDr7ixIpcmc; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: ff584e56-d962-4f9a-95a1-fde81cd6ab9a\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-15T10:45:07.837193Z","times_seen":182432,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/footer/logo_mini.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/footer/logo_mini.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=3cSQAEPVUoQw1bC3; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=VswdC5faZGNPXhwF; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-153\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":339,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec921737dc68bdec198dbf790cf25066","sha1":"7783777f39dd0406bf43f29691d5a297b6cdb254","sha256":"afb8137f243326318186eb1680a2f30d060004621a320a6ca93b807ec16cbb9c","sha512":"ee0a8cf1b8f8f28432ff245b02d211d6cc29d22fd55d60ac70ff126fb9b28a704bc862e2b7ae10027554b50b03ed73ee48e7f373f862ac8edac89350268dada7","ssdeep":"","tlshash":"00e0c0c4616833d090100768cf7f6165a5e2f4ae035c044bf2903115b215fc7a062b08","first_seen":"2025-08-09T06:39:59.047675Z","last_seen":"2026-01-21T08:18:57.02182Z","times_seen":36,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Cn9yliqE.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/Cn9yliqE.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=e693VLwdJtJULGR9; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=RitJ73Qc8c8RqDuy; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-6d137\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 113112\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":446775,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"19d5b85492f4d8505bb0d3df174e9e2e","sha1":"84b6548697aa030be332309225e873884d9f3dba","sha256":"79ce7f24d8f2fe12521d0d2ab3e1f77deec6ed8d84313c24f6b0e471532776a6","sha512":"0be04f2ec94f2b25a681d6dd3e61486c30aabe678dd82d01a56bd4a6d9fa45faae911209c277356941b283d09658258d66ebd35497c800c064db73ea06177e1c","ssdeep":"1536:kzGEyMiW9myjPH+UTrFuRSmicJ9HZBynmI0+iAFBynmI0+iA5zAGg1JxBynmI0+3:ktHPH+HFQttb40vzx8","tlshash":"6794b9e1f3a8a1ece017e7fcce26a471351a35fb3b91c5c44294ae749e221ac9d5dc81","first_seen":"2025-10-04T05:11:03.35039Z","last_seen":"2025-10-07T18:16:30.139568Z","times_seen":8,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Chd1ThOZ.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/Chd1ThOZ.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=e693VLwdJtJULGR9; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=EU1Cq2eqAsD78jnE; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-47f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 678\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1151,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (1142)","md5":"317a2201ef3851dba19e8b41380c8518","sha1":"69f8afc7452ae5bbffe308672417d74ea784cee0","sha256":"64cbae9ec71c97c3ca661b3a42c7f0de57972f702378830b7911e5a148b1cb0b","sha512":"4d8e02b904019b8bc965749301e7a14aa67543e54a8b2a19862be134620f94b55e7a2481c50590bf05fc5b7f6ce8e54746b77e238fa7b3a83fbaf81345be42c0","ssdeep":"","tlshash":"372130aebb3aa7bc7c245a5f42306f30f0132096ffb8945cb8d22126e3425a155640b8","first_seen":"2024-06-08T05:57:25Z","last_seen":"2026-05-26T01:50:53.816934Z","times_seen":119,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/sounds/click.mp3","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /sounds/click.mp3 HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=3cSQAEPVUoQw1bC3; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9xVMJU2hXECGJpTi; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 6731\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: \"68df7ca2-1a4b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":6731,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"b497ee5b7f24d5540859a2fe9a2f94a8","sha1":"402f32b8a0c59a6655cee008020948c8b0dc3878","sha256":"627e28dd820dbe208a2d764c086b4eca2c54330b9741073bec9da852aa592962","sha512":"1f0e4fd80c187354ac665cf7e3dc52b8834ef35022c6fe922db3aae0f89f8530c5e97aa2d4860f2351c8fbf05ea2252593d626d12b8f90865b7eca6b6a476ee9","ssdeep":"192:79qf6EhSf0IotHNKWliJRgFn0DsEZM8+h/wgMgl:79qf6ASfCtHtliJ2F6sEZMph/w1gl","tlshash":"cad16d6a6d478951e40c5570d8ce1b4c737824b5afb0b3daa267f79e00e536c12ceb29","first_seen":"2023-04-10T18:19:05Z","last_seen":"2026-06-26T20:23:29.963181Z","times_seen":1246,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/api/v2/banners/main","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"GET /api/v2/banners/main HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=yTy2GsaEusSvyrhD; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg1_=VtYk5mna3tMafQzmXjD6; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: ec5c68a8-ed79-44b4-a044-a681cf1eb7e5\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18453,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"29c7092590a1f41fd0103346646d3927","sha1":"3918d4efe79c75bbe844f1a231f8bb84ab3ac3a2","sha256":"53c23c1330c92f3592233433ea6f1b0af00588a60250852e64fb879196e70099","sha512":"1c592edc30cb899fbdea45357cac2a493acc3764eec7bbc6527c424db32028790f60fbf0797ece3e4083fb1320001fe737e15552d548b0a805d892439512181a","ssdeep":"192:6PtZWb2mtLxHJRRhgJcmT0ciInIynzpEjhMeJpjoo7Lnq+Y4YA7+c6S6H7AN:eitR3LVY4YA7OAN","tlshash":"8282fdd2d6bc566e0a9531c6cebbbd8c309c6905f148efb3ee1ed45bd1141a2d91830e","first_seen":"2025-10-04T22:06:20.822407Z","last_seen":"2025-10-04T22:06:20.822407Z","times_seen":1,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/currentGames","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"GET /games/casino/currentGames HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=gvXwPCOVRFzSVDiQ; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg1_=AgK0yZDiSCmCvbLBWbCa; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 85\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: ec1f9bfc-b2a3-4c2e-a9cc-9e19b06fd089\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1500,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fa91901bc4acca1398db5887d552592a","sha1":"91954b773fc196e8a8c8a33875e2d509da178b9d","sha256":"ec9d26bca05d99bc7897a3aeb8c6be9772cd63f98d3b50919721c453645c53d7","sha512":"9397da6e831d3eee965156a0bf6e035330ea01c95a6cd690061c0b8be0a908362968fdc89b9312725b9ab1898fd339888e25801e4f1584bdd09474166a14f729","ssdeep":"","tlshash":"2731dee9f6ac1cedc50446a04e0f7ad9a4cc753b23864e925adfec2682809e76441637","first_seen":"2025-10-04T22:06:20.823368Z","last_seen":"2025-10-04T22:06:20.823368Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/ext/cdp-customer/v1/p","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"POST /ext/cdp-customer/v1/p HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwch64x.life/\r\nContent-Type: text/plain\r\nContent-Length: 744\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=3cSQAEPVUoQw1bC3; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=um8UZk5Qfx40FIOB; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\ncontent-type: application/json\r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nservice-worker-allowed: off\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-15T10:45:07.837193Z","times_seen":182432,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/msfup7WND3gIcQOEA6yrzn9CUi7xg8W7n0Am8Xu7.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/msfup7WND3gIcQOEA6yrzn9CUi7xg8W7n0Am8Xu7.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/webp\r\nContent-Length: 43152\r\nConnection: keep-alive\r\nlast-modified: Tue, 08 Apr 2025 10:00:19 GMT\r\nx-rgw-object-type: Normal\r\netag: \"9749cb678f0dd3044e53d10cc706bb3c\"\r\nx-amz-request-id: tx00000bf1c4f2d3ab5fcdf-006867c79a-1639b45fb-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43152,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9749cb678f0dd3044e53d10cc706bb3c","sha1":"a08d9e0ca5dabd2fecf5f22d26ecacad10ae2b7b","sha256":"c01b6fa848eac96c626316b1262ec7d5d58c474ccc68abd9b752a93cd56a0aea","sha512":"8884ad7a4d4d9d5e217fb57da7c294f5b37e717f9636511b5da29ae80ff341ad700909d2fd8b25d9275f957da750e12c3b24c85f1cb3a0d5576f0efc80112386","ssdeep":"768:GNGhsbOZlR0QqONdBovuI2AWzorAgi2JrgRNYTtcFP4QYnAw:47OZjqgHoPFKDgZ0sTtcFPgAw","tlshash":"86130121230f099493a7e8dade87c49d2e4e2a188f0d775342d96e96c4a5cf9c5bc7cc","first_seen":"2025-09-09T11:33:29.107349Z","last_seen":"2026-03-01T21:47:53.463039Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1196,"timings":{"blocked":1168,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_ipx/f_webp,avif\u0026densities_1,2,3/img/home/100hp-mines.webp","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_ipx/f_webp,avif\u0026densities_1,2,3/img/home/100hp-mines.webp HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=axWMToMevviSY80o; __ddg10_=1759615530; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyOTU3MiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9l4jof0J2NaQ6Zdg; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\ncontent-type: image/webp\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests;, default-src 'none'\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\ncache-control: max-age=60, public, s-maxage=60\r\netag: \"132a0-ZoF0YI5D/AFP/VuyovD9W7Nyv5w\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78496,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2984x2060, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c6f029f85525ce74fdc27158bbcc9f29","sha1":"668174608e43fc014ffd5bb2a2f0fd5bb372bf9c","sha256":"be6bfff23afb528ef93365d27766fa7e58e71cec454e050e83bedff33d100364","sha512":"b1205bb36bb949f7ba7ceb04fbb7d93722632631e49ed96365523dce46e0d1c97aeeee542418f8291b56c950e607213090c06412e1a7c15e2e9c5a4a67dc31e1","ssdeep":"1536:lAa7AAAAAyrn6EYN/0TQTYDl5gMw1CCUq7Qe1Gm4QccRxEHcsF+loQ:lAa7AAAAAyDl5TQElECCN8esQccRU3bQ","tlshash":"367312ddd9037375641f38f00b4a924b14489a8152d09353d268e39e2fbacb9f2b3ad6","first_seen":"2025-08-09T06:39:58.968609Z","last_seen":"2026-03-01T21:47:53.47534Z","times_seen":34,"resource_available":false,"data":null}},"time_used":683,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":671,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/C79gAr2S.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/C79gAr2S.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/CkMSVCQx.js\r\nCookie: __ddg8_=9l4jof0J2NaQ6Zdg; __ddg10_=1759615530; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=nc33cFo3jaWs8d8v; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-49f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1183,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (701)","md5":"17c723dfaa3649a1f25d74af9303519f","sha1":"d9c6a1617a8f7f0397ed03b857617d9617f2b47c","sha256":"409766bb52c4bc3ab1d2ec902db3b1515bc01798c546809b70ba784878d3fab3","sha512":"3fa4fbf36a8510ca7a54e39529aea90b799cef995992c65b83542a5e05e72b4f35b1299142cc8f9e7f953910d8a955aeb20722ffc9e03b62a820f652ed825b92","ssdeep":"","tlshash":"a321238f1598dff8a2cd5de84d3211155ad50dfdb2ed98c7c2091a6917b002ae1aa723","first_seen":"2025-10-04T05:11:03.283232Z","last_seen":"2025-10-04T22:06:20.825711Z","times_seen":3,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/dlv.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/dlv.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FAxvqZHXbDiuBuve; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-9f81\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40833,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fd10397e4cde4d6bfc4e9ba25ff4f3c4","sha1":"ce2eb8e4d28d5e12bdaf25db6320cc00560be2a8","sha256":"d806932121ff74dc7848b1c401bfddeed58a476519d0aa74d475689f17ac383c","sha512":"be0caa33b1518ac871e6e6b0085812d838c7b67b6a7648e56db0cd67cbbb38da7c8adf11fa36c7ae314b837682768b229310afb657395c0698db2e4a5f4ddff2","ssdeep":"384:B1pLXXAlMrUrUcbAD7BuPhJpoMUVecccCcqrDiI3N0/PAW:j1HAlykUcsHEPFUEzTDiI3N0/Pp","tlshash":"f803ac6bf724dc37d28ad3bcd954806432298696adc4c38192f9ff1f992588a3d4e7c1","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.890504Z","times_seen":80,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":178,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DRLB4-_R.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/DRLB4-_R.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=7wm8ovmUK7Jj8Uv1; __ddg10_=1759615532; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=bEVUlZJ7RdbJn2AO; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg10_=1759615533; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-201\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 6\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 276\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":513,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (512)","md5":"edbd750ef08a3e40bd3f93ef00424804","sha1":"2910560cc99b8e5fcf85488d82a39cdc3d45c09c","sha256":"19c614190f4a1ff133dd089486879e169ff387fc1dcddaf2177eb99e03b86f4f","sha512":"78fb844b4a23955443ad1a90c1ece096cf92e30a1b05a64a80d332774ad2063a4491e18a2a2afc1788c7762670f8638d1833868ff05f3775eeedec6acf4fd290","ssdeep":"","tlshash":"d5f0508b1caa18941de65f779027b1d2337a516e01518085feb1e6c4a10759ef32f430","first_seen":"2025-10-04T05:11:03.352335Z","last_seen":"2025-10-07T18:16:30.062849Z","times_seen":8,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/favicon-16x16.png","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=jyTtDnazfXCVdlqw; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=xuVLdhkdHM5rg691; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1103\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: \"68df7ca2-44f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1103,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"11f24fdbf91f702bda779fc31cda72b6","sha1":"675c7e4a5d8443b041056cf934a6e2f652914a62","sha256":"22680e0318483689dda6c739ddcada0864dc530300444247c87d8233b347b858","sha512":"56998c6ce69ca75e2c00756450a2c33ed491a5be0499d5003eb3638d643efb5d395705a986df5301f74ffc9c0f10c707b9e7837a491ec7afa55f349240d2087e","ssdeep":"","tlshash":"de1146d1e121e051c26614f169222480ff67407bfeff8b1afd22a4145c5a6b997f76c1","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-06-26T20:23:29.961595Z","times_seen":155,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/best","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"OPTIONS /games/casino/best HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwch64x.life/\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ZO8DrLE4QvZwhuUD; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg1_=eDqMgMWq2ZlYfI6w1xxh; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 07ea36b6-cfb4-4bcf-a969-65e6ce16976e\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/api/visitor/v1/configs/default?jsonp=true","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /api/visitor/v1/configs/default?jsonp=true HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:29 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 5566\r\nConnection: keep-alive\r\nCache-Control: no-cache, no-store, must-revalidate\r\nSet-Cookie: WEBIM_LOCALE=ru; Domain=webim.ru; HttpOnly; Max-Age=86400000; Path=/; Secure\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5566,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5566), with no line terminators","md5":"638d060432ecb93780d761ece2001dbb","sha1":"497f80e2de439a0b5260eb9448cdfb7f5195829b","sha256":"8a2680517eb60dd29259f47c0cce83bbb653cd5330ac747b055836e4578974cb","sha512":"b05c7c566357807d136f35df56d69d9cdf8f1b4e3dace8ca3b4c3981cf8fb5bde098bc0076680aea6792dd8547ad14c6e5c6be969f660fa02b5a490b8c1a52ed","ssdeep":"96:mXzMOTx4alggVgY+/Syo6ygym/WYH9XOc4U+4s/cQtW6CVgpcf:k1OVY+KH6Lt/WYHccwUQw6CX","tlshash":"a1b141b1d126003b16c56a56ed396a8f277492d2e740ef3e8f1c0817f38dab562437e2","first_seen":"2025-10-04T18:13:14.581015Z","last_seen":"2025-10-09T10:23:07.378313Z","times_seen":6,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/images/default-department-logo.png","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /v/images/default-department-logo.png HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 15479\r\nLast-Modified: Mon, 29 Sep 2025 21:14:19 GMT\r\nConnection: keep-alive\r\nETag: \"68daf6ab-3c77\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15479,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"53a142e29b647ceba5a2adf6cc69b919","sha1":"37fc7f6523e5f4d9e01157c70acc74069bfff416","sha256":"a5b367cc08f01ae61da2109c04047ee7e218df860be597c35d4ca7e064fea63a","sha512":"898a79097ada980f99bc1fe495cf55aa54050d286e108e9fec3f1e53e75b0a88e650a53bbae8a5b0c708f227367b3b193c45103c482e71066a9c0a8988aca61e","ssdeep":"384:Vk8Swa5Qg42uLHe77h+CnqUMfgFvywxTcFOid/BQkrO9okl:ONwa5QgRuW7UecFOi8krO9oU","tlshash":"7e62c0eddc7f24cfbcfa527e1d9d0c1e4d989e240170a8f64ef3d49a4821a66d5029e8","first_seen":"2023-05-01T22:32:10Z","last_seen":"2026-08-02T00:07:57.723413Z","times_seen":2299,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":127,"dns":0,"connect":42,"send":0,"wait":82,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/3LDwFpHfnzejPdw1gkkhY2GtywM01PtiYajInyiD.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/3LDwFpHfnzejPdw1gkkhY2GtywM01PtiYajInyiD.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/webp\r\nContent-Length: 213616\r\nConnection: keep-alive\r\nlast-modified: Fri, 18 Apr 2025 08:17:40 GMT\r\nx-rgw-object-type: Normal\r\netag: \"1ece2594b83e3fe5f9d9871670e414f0\"\r\nx-amz-request-id: tx000007164bd18d3e430c8-00687f66c5-1686c198d-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":213616,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2880x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1ece2594b83e3fe5f9d9871670e414f0","sha1":"96bfdfc02ad70da1d0a5366b59701d30d2dc86c5","sha256":"d3c3132f9a6fa0f31b6c17dd195425013614fbb136baededadc9394a41330298","sha512":"4055ba5af0711ed8a6c780904b0c77eff36ddded5223173e8558cc8f1b0a4ba83af073e426df797b2e670343bffc42b8cb405002f19795bbf7e14919755cd12f","ssdeep":"6144:onJhrC7dAbGBbIXgo0Z8CND/EO1UEgjKAzDSM0b1aN7V:onJh4BERiTFGEg+cS71Mp","tlshash":"92241237b8d68dc9adbb42945930ca09f0975066ec972cfc72201b18e6577b792f2332","first_seen":"2025-08-09T06:39:58.829989Z","last_seen":"2026-03-01T21:47:53.499531Z","times_seen":32,"resource_available":false,"data":null}},"time_used":1146,"timings":{"blocked":1115,"dns":0,"connect":0,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_ipx/f_webp,avif\u0026densities_1,2,3/img/home/hacksaw-mines.webp","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_ipx/f_webp,avif\u0026densities_1,2,3/img/home/hacksaw-mines.webp HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=axWMToMevviSY80o; __ddg10_=1759615530; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyOTU3MiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=E3LPVuBB5RmaglXw; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: image/webp\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests;, default-src 'none'\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\ncache-control: max-age=60, public, s-maxage=60\r\netag: \"28f28-43zTH8ddKLOC8FO6fF2jBt7xGb4\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":167720,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"beaf795ddb57e557f9ef5bebe4a70e11","sha1":"e37cd31fc75d28b382f053ba7c5da306def119be","sha256":"72a11bf5c166c06de55683f827225a12649dc2ac5852f2a4f46838d285c3754f","sha512":"fdb558a4aa70d0db2670bde67cecb08f470f87e34d028cdcef2735e75916b89ad1124f56fb55abe9f92c21e6100363d9588ada6092941bda85173306d06ee22e","ssdeep":"3072:fNOoJ3KF5TvYdwVVDdMIhhl1tPGDnSU3sbYwPNjK8JJFjfCurdlJNd:73qTvlbRMIhJqSUqZXFjfxrjJb","tlshash":"4ef3122b1374ed91f3fd8a357bdbab46a3406d26cadd5722c270d409b8b71d88427d21","first_seen":"2025-08-09T06:39:59.030551Z","last_seen":"2026-03-01T21:47:53.238491Z","times_seen":29,"resource_available":false,"data":null}},"time_used":1005,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":976,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/cdee9014e4d2f1811fca73b151d093dddab267bd.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/cdee9014e4d2f1811fca73b151d093dddab267bd.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 33368\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1850C6C2D9CEC350\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 2541\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FQX6iet0KGLJbom6U6No46NTy3GUkReiEVVYmAbjDq1nEjlqS1%2BF6ZylMWvqi3k3YkNIpRyFaAtRPs9ChwyMYi4ZQKWRvnjmsUrhe8HF\"}]}\r\nCF-RAY: 9896a5541afa9703-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33368,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"556b860eb17cfa6f8fdc338ece02a958","sha1":"791d2e9a29244c70eba438000f50008eae113932","sha256":"3368734f4cf53acbd15d3680efe367fd3961f0db6c833b11e42647ab13ad2b5b","sha512":"117c294931b7f1ea10fa14125979e75d3dd7cb12703384a92dc486a501369cce6283341b4f707d0098db48deb700c5205d93b0d833ea6dcc969bcd0f3127c7d0","ssdeep":"768:/6KG8tImiBsY+enLcpalasRXNJD5QINWGGcrZ6NMLqolU3:yKG8t+BsXpaYsxlQ+3Xg","tlshash":"e8e2f108acc87f54536785a81210e58f9f29d8ccb5e7968b8b8f1c204879c586c3ebde","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-03-01T21:47:53.332676Z","times_seen":51,"resource_available":false,"data":null}},"time_used":1724,"timings":{"blocked":1697,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/common","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"OPTIONS /games/casino/common HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwch64x.life/\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=DG6X5POH1AXD6nMI; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg1_=iFQoOux1uLz8gryeVtTc; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 53e236a9-62ca-4674-bcf8-1fb2bd497ab0\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/c9kQMZ2TyscdVQr9IZSbgAFW3rzH1Nv3T8a9tN1N.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/c9kQMZ2TyscdVQr9IZSbgAFW3rzH1Nv3T8a9tN1N.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/webp\r\nContent-Length: 131374\r\nConnection: keep-alive\r\nlast-modified: Mon, 01 Sep 2025 09:36:55 GMT\r\nx-rgw-object-type: Normal\r\netag: \"6ce5d68117080738788ff1d8c8e58f63\"\r\nx-amz-request-id: tx00000b6b392a6b3f6a1de-0068b56b2d-1733360d4-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":131374,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2160x960, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6ce5d68117080738788ff1d8c8e58f63","sha1":"87ae69a0566354bc05565f44b636be6fa0d47d95","sha256":"bab843571b8e4c3af0a1f74f2452a291b28070cd2c0f2ad250910585c14e86ea","sha512":"e19d176b2c7c41ea7e9e8799750e5d3b14b367154e9653d42ca461f363717b6a8dda9454a7c7ed7241bb194f4aba762a48558443a300771451a7cb37c0edb152","ssdeep":"3072:ySS4FM+drB0mTdSxbO0EkBovkhQfrrPvu/YluByZL:ySfe+dV1qO0pmvZrD26L","tlshash":"e5d313dd237ac0b2b48e0759851f9dc970f7396aa6ebf81421b05c07ac9f3b541c963a","first_seen":"2025-09-09T11:33:29.097699Z","last_seen":"2025-12-29T21:49:40.447051Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1126,"timings":{"blocked":1096,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/517d2e03971d41f6875781c9d5bd4443.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/PragmaticPlay/517d2e03971d41f6875781c9d5bd4443.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 28436\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"292c32f96313eb629c6048365b9cfd30\"\r\nlast-modified: Mon, 06 Jan 2025 19:16:14 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18502F9314D16366\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 4603\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wOaWO%2FqoK9WzSCQBrY5Zs20br6GblModvHCTKJaRh9j1BB2JqtfT4ekUoIxHYjIFYv0DxcBQICGZtlYqeqZLigl16iMkG1E0jjIJzlcW\"}]}\r\nCF-RAY: 9897e1010bc7ad9f-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28436,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"292c32f96313eb629c6048365b9cfd30","sha1":"6a4d8d3da115b58939986073e0f1e6e9a169ff75","sha256":"31082483e8edfda486e628f211c772c0638b940f0838dc7bccc910fbf23d8d09","sha512":"078c6bef153f7f4958a768a44ad93ed5f3c80c46ebcc36af22bbf63af8afc009609495d28562cf4e344218b5a91d7b90923d98094b3153b71f70bcecfa065684","ssdeep":"768:UELWwDo/GftPDWMePOGaMfMtRY3vBmG7NsMIZySnx8A06c:rWlGfRDX0CtS3AGJ5I5xO6c","tlshash":"55d2f1a75637eb3d2f64a1b9588bcc7fd1899acd417e44d18389994c124f6db8372c0c","first_seen":"2025-03-21T05:40:08.927157Z","last_seen":"2026-07-12T17:41:43.58519Z","times_seen":35,"resource_available":false,"data":null}},"time_used":1747,"timings":{"blocked":1719,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/ef5aa848cb6234dd6ff6a4610bfb6b8c8ecdcf96.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/ef5aa848cb6234dd6ff6a4610bfb6b8c8ecdcf96.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 23538\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 185081719F30778E\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 6383\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MfPZx1VXI8XqDBRz3ca%2BSvFuTYzs%2FelTFGiMEbYCoGsARKLGEqh0mkDxmYFJM8tDO0n92oQt5Gd%2FofAA%2BXrM5A%2B%2BK1nVnwoksm%2BA6RJ4\"}]}\r\nCF-RAY: 9896dc8a89f3de38-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23538,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"21714aced848c5429bdbc1e1975dde05","sha1":"3df268e58050169f784d896ba59ba9364269f9ff","sha256":"63e2aca2d1ea721d14bd2424e9129963c19e7153e93addb1986760898705d611","sha512":"5d0f92ddf152117fe20879d2774ec0036230a8b58df63f284a5711e16cfc85896938238fbe9ba93a8d44e65db9a2195dc8b9f237a9de6211addad34cc5c942b2","ssdeep":"384:TDMXpTYs0PeRjCI91ZFECgOXyX0EqSP8mb6yg7jV0VSQlMrPQTmG41/JDKSAmL:TDopcMRjCI9pEPORSfufj+EQlx6f1BD/","tlshash":"24b2e0b06e40fa1a2e27d547789510f8ffd1fb65cc4ccd1560b9fa8258e156e9873c02","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-03-01T21:47:53.241668Z","times_seen":66,"resource_available":false,"data":null}},"time_used":1742,"timings":{"blocked":1715,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/SlotItem.53B0cU5p.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/SlotItem.53B0cU5p.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=okhxqzG8algqbAWO; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=0Dc9j4WO1KlwOMV4; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-97a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2426,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2425)","md5":"b14d226191796659cf7b1120e9bb135e","sha1":"ee251b67aff5be5a88a72028241105b6995dcb65","sha256":"5e8753c788c3b12f8fa4c550c3ac5a33c26ac32be1532b81c2f3be403b722ab5","sha512":"eae06dc163e40d7d0b3dd3093eb7dbd1ae05a29bc44b8153fa5b33f3aec27588f70e039748cc1d6411a4e2c6cafe575532e264ce868bab375e4ce1165d828b35","ssdeep":"","tlshash":"bc417721f50f686f64b7f3b0e5924c8e31bc9343e53e062eb35a9514c78362a1d320e0","first_seen":"2025-09-09T11:33:29.073473Z","last_seen":"2025-11-28T02:25:21.304382Z","times_seen":17,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/best","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"OPTIONS /games/casino/best HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwch64x.life/\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jgfuCavz3Gfrk9Nv; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg1_=ONWJhdwiAQEsSedIUjlC; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 99194b2e-3b0f-4e54-93cc-09cf6efc3691\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"gs.jdwqqi.site/socket.io/?token=\u0026EIO=4\u0026transport=websocket","fqdn":"gs.jdwqqi.site","domain":"jdwqqi.site","tld":"site"},"ip":{"addr":"91.215.43.62","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gs.jdwqqi.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 05:41:47 GMT","end":"Fri, 28 Nov 2025 05:41:46 GMT"},"fingerprint":{"sha1":"A0:04:FE:A4:D6:2C:BC:C8:08:C0:C7:1E:53:B1:71:4E:C6:8D:D7:E2","sha256":"FE:C1:18:11:0B:D5:DC:B3:B2:7C:2B:2C:2C:D5:40:F0:B2:74:A7:52:80:A8:D3:B3:88:BA:A2:FC:32:19:BF:42"}}},"request":{"raw":"GET /socket.io/?token=\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: gs.jdwqqi.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://gwch64x.life\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Kh0s6KFbP10bWvY95tC4fw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: ddos-guard\r\nSet-Cookie: __ddg8_=F2hY4EXRYMuCy0hs; Domain=.jdwqqi.site; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.jdwqqi.site; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.jdwqqi.site; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg1_=A3zcb1dMLuGk3hX5CfL5; Domain=.jdwqqi.site; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:30 GMT\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nDate: Sat, 04 Oct 2025 22:05:30 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: jyIWgp6LzLu4HOCUbRub4z9RzSk=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover; server_max_window_bits=10\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":506,"timings":{"blocked":0,"dns":93,"connect":113,"send":0,"wait":273,"receive":0,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/highRollers","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"GET /games/casino/highRollers HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Y2amkpwoYmoncPsH; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg1_=CcDJcRtFG5bgfYlsy7lV; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 80\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 02eff240-0ad6-40c4-890e-44a6a8cbc8b6\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1599,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bde1366d4c9b0adaa9800e52407138dc","sha1":"7e1660d1d6d34510f821df0125aa064f9ffb84a5","sha256":"e7785dff5839352ade32cf9f710befb741e978291fefa677feb7107a5282189f","sha512":"6aa9f32407aa96ed797d8778e08bee3bc685d6b94e1fe9629b662c48469f60fc0fab65e198604322d5b20582127de14774e3cf3f32ed6e857ca32e7343963d6b","ssdeep":"","tlshash":"573102e9b68c089dd5584ef04f1bbbda604d692b3249cd934ddbdc39c6406d7b440636","first_seen":"2025-10-04T22:06:20.83438Z","last_seen":"2025-10-04T22:06:20.83438Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/lastBets","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"GET /games/casino/lastBets HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=meqlIdnWWnVDR1ct; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg1_=x6wBbHD99ZCYBgCkmdL8; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 79\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: decca2d4-5b40-4a73-9514-e2dfb8e20dd5\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1456,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"611dfb7185b5868ef342f4651caf04bb","sha1":"a89f11b4511bd8c208655bcc5bd245e50f5145e2","sha256":"c760e2ae51d6d6af8fefbaf9b684d883fb4d2759f8b1670e5e00ff1b7313ce9a","sha512":"3cfebbe02a8b0f84a05bbb8d66a3b0e5444f661b7968ca0fbe02431a4aca0ac249bd6c03d2e2d12ec32e28f8ccaef15143a3f762c6e6bbbfe0a1ccd39afb1483","ssdeep":"","tlshash":"2431a0e9799c5c9ee5500a605e0fbfd964cd291b128b4ed209dbec6887404f76690b33","first_seen":"2025-10-04T22:06:20.809157Z","last_seen":"2025-10-04T22:06:20.809157Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CcFtdMxu.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/CcFtdMxu.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/WmOt8kDh.js\r\nCookie: __ddg8_=ACeYYLIdSVmyOMzI; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iPrqt0TSb9Gs9nzx; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-2ec\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":748,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (747)","md5":"538ce0330b2ced9c093d8be1671d340e","sha1":"d459df6255b9e94c10f9b2babdae4c28f8bf3b16","sha256":"ecb0cb590d0277294f4e65d21d40be8ff5315de56faabf0859184ad8719167f4","sha512":"98045e91b5681bd8752e01283514a64c451bb47e3a9d85ae35995444d7c01b7f764f8009be06c0898e95d56faa9db5942589fb8b2a5c73ce5704c650b8edbc5e","ssdeep":"","tlshash":"6c016d8e647b65ec49a577403dd84ca45b91bfe5269351813e2c6cc08bd4c85b53903d","first_seen":"2025-10-04T05:11:03.657849Z","last_seen":"2025-10-04T22:06:20.835779Z","times_seen":3,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/vue-splide.C9Z0wB1j.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:26.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/vue-splide.C9Z0wB1j.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=ZD147zRyhIzGWfmm; __ddg10_=1759615526; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=BY1CY5uafpdiIeZy; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg10_=1759615526; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-734\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1844,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1843)","md5":"e638a23113de5c173bd45cf1ec17cedd","sha1":"5e71875f9d7d6d3240729a9300e2be7b2c49d0d2","sha256":"25fecdb4c8330c6bfab65a09dbb53c0d8f407344f2ba4f4438bb48293444c846","sha512":"c76d640e7077019c6c609684d476a47b812c67eb4fbc8cf85240d2bc6e96e5254434483c8c8046b15b3683e09c749b26055b48f9656e0dbf5d78bad8aa18872c","ssdeep":"","tlshash":"fd31442240c92f599843973229bdd7a964eec2534e6302baeaded320468ad4d07e49cd","first_seen":"2024-08-20T04:44:02.347145Z","last_seen":"2026-07-20T07:08:57.528836Z","times_seen":137,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DVB3Cdql.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/DVB3Cdql.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C72coOWc.js\r\nCookie: __ddg8_=QTv0NOnNCsLmc82E; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=MqdjKWdGZ8tYnCN4; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-82db\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 15365\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":33499,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32971)","md5":"20eed75093de2fc9d2444246aefbafec","sha1":"4f36aff0a4fe6f29e8db087ce85d2caa85dc3f4f","sha256":"fd6447eb787622249c366ac85f7ac12f55a700865902fdf1a5b6dd6997096769","sha512":"a11c3328cbef91f50466b6d9c8b4b01d21e125ce99a87a5ee73e296f08fd6f81f72a1bb79f7ea9800f09266f2b04d48ddf49905e6d60dc5d7cf899cf8417a0e5","ssdeep":"768:bXU8MMca080Hjkh5UyvucDYxhROs9SewPpUzSsLP20+6a7kHGQPLFODM:OI088a5bvuc0xys9SeSpU1Lu0+67mQhN","tlshash":"7ee2c6cc7641b018a3a711b6e1ef580fb37a2984980e8554a0aef5e43d7c4bd43abddd","first_seen":"2025-10-04T05:11:03.415244Z","last_seen":"2025-10-07T18:16:30.105627Z","times_seen":8,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/smartsoft.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/smartsoft.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2igbhXaou7ciuCBj; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-3341\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":13121,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7722afce4dc4c324b442e3ef00aa3490","sha1":"475e0ba00a1ac2e95ae1c61480ebf9b72a979986","sha256":"487a0543786eb77e32859b8f6d2442028623bd3bd26713f4c5d2427b7539211f","sha512":"ec087002ad401686045e7995d9d5da89d0dfa16880c0615b188975b824f4e8c7dbb8bd3612b814f04d3dacd8174222c545ca714f0257c40b8e2ca3612bcd2fff","ssdeep":"192:iL34Xr4ZC4Z8NmZ48+fDNmZ48+fwNmZ48+foPF34XqGu4ZJE47Ej:OHZfZ8NmZmNmZZNmZjFabZJE47y","tlshash":"6e42a5bfe394a1b2e145d3ecce06d070251b24faafa0c6d486b5bf5e571404f1dada84","first_seen":"2025-08-09T06:39:58.935368Z","last_seen":"2026-04-15T02:03:05.922293Z","times_seen":62,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/tPdbiW_V.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/tPdbiW_V.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=e693VLwdJtJULGR9; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ntnLUZFXgtJTehkT; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-c0\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 121\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":192,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"af7805d42f0e94d87c24a603905aa544","sha1":"7b8e20de9b8033988fd4fb49ae5214be2a1b317e","sha256":"67962a43b72e5541bff19a54203273e73fa6a40aef2c34b20da51c95817d336f","sha512":"4f5b71fae1dbed1ca64d3290836d4ee5f28885ca526c71eaccbad91c58ee45a25d2a2e847846f68d8e02509d5c833f84c2e7a9928991b0418953cbe3dc954732","ssdeep":"","tlshash":"07c01285d8202077cc607828a1d20f42027e3644e115d17c77fc2482f470565a4aec65","first_seen":"2024-05-07T05:56:57Z","last_seen":"2026-01-21T08:18:56.877435Z","times_seen":55,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/C28Ks5WD.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/C28Ks5WD.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NQbcYpHEcdeIDRJ2; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-34783\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 5\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 53952\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":214915,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (62123)","md5":"226f97aae05b1bc8517bf6e8357b2035","sha1":"ec26d9e8486f92c5be054c7bbb23c607efc40016","sha256":"3a540feffb54425661775040e9d000fc91c8541e60a10d28b4916048e20d7c69","sha512":"a3f3fe091a35f13546658cfc513bdb66fc91a4fc90794d5ddfb88b64b6291a59029695134bac483280d8e88206b6497415122e156c68d87abd6a8324435c4057","ssdeep":"1536:7oDsoGxvPYALxa1k9CdeIusU1aCrhquwRpeQIvkn459rS90dBuwRp0r1GcJwdAfH:zZxvPY0L9sMawdAfGvM","tlshash":"03247daee38690fde12b8794a44b381431752ffea681cc8381fc5d0466268fc57ede65","first_seen":"2025-10-04T05:11:03.298502Z","last_seen":"2025-10-07T18:16:30.073415Z","times_seen":8,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/igrosoft.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/igrosoft.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=3X3yQgVtHPw4mOAA; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-58b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1419,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c43ac70a9fd5785f819f4698a2bb3155","sha1":"1f00e8258187554e29a427867e73d6586257652d","sha256":"5d85cb4f4b63095dbf40a563a99373d28a4dcf47336c5cb6ded8d1fb1785b45f","sha512":"5dfa7a065e4b139c9ac94456d3aafa832e03817e553b6f8feb33b798b2362d38ad663512955e553f6a4bc9004246d8823baac47b51c410acc4ce9604429d5a68","ssdeep":"","tlshash":"af2174b5a294c76cd004979c543ac629bad76abd7fefd40182c12002c1f41ed8d778d3","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.948492Z","times_seen":69,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/D5gOYdM7.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:33.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/D5gOYdM7.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=Jb2lfTdyk0j5JPSK; __ddg10_=1759615533; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1NgfNYTkgDaxzzGh; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg10_=1759615533; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-1658\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 8\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 2469\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5720,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4252)","md5":"0b267ccd50f6720630d6f6069c3c0da3","sha1":"e807dbdb3d3f080fd9377141a80d408d5d72739d","sha256":"db98026b4bf01b51965d9e63c86fd742f4f92228b088c6fc888e39f20288243e","sha512":"196f8d868d3d7cefa816a2571e5ae57cd224d858330bb214b36e63cc31de93ef824d2bd19c0d076bc091a15a5207d2d4358688dc6e0c6ac1f65450e7ef3564aa","ssdeep":"96:v0QRrpGna8MvmCToPs9VRGJysHnwcO24BR0fTeW6ctvRqAWVtsqSE:vHRri5MeCT2sJGEN24n0XqJsqh","tlshash":"3dc186ccfa95f47a83a3f570f16f950be17b69c084585064e155e8e03cb6605c23bf69","first_seen":"2024-08-01T00:14:45Z","last_seen":"2026-08-06T18:06:56.169898Z","times_seen":135,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CkMSVCQx.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:26.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/CkMSVCQx.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=bzfSX9mw9N9VCTPX; __ddg10_=1759615525; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=IonCZWnm81qa4X9D; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg10_=1759615526; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-75efc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":483068,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (47660)","md5":"79068909446126a70dccef2e4c2a06cf","sha1":"3f1f59ca79626ad920c3f2ce34109d2d06ca1b7f","sha256":"8214d22013513fb9a76d56a5723c9ecbaf725ebb9beff448232c77e30a459faf","sha512":"437b07be547ebde1a4dac1fdcfbdc3521519d219b964b3e1cb959bbf76c98f5165fc8af5ed54a44cb436d8b827326c03020820e0dd888540088fc28351669c12","ssdeep":"6144:EW2i6XYOhfa7HN9OCjhpr9SPXiBfmECS4Teq2YvnqX1SnI7mbvnQGcRjsXKAiH2i:ZXkhS7DO+hprP9mxS4VTqlSnKG6wXKF","tlshash":"6ea45ad97196b02213f619e4807b0106f3392a54384ec4e8f16d9eeb3d7690a92b7f7d","first_seen":"2025-10-04T05:11:03.286196Z","last_seen":"2025-10-07T18:16:30.070847Z","times_seen":8,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Chd1ThOZ.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/Chd1ThOZ.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=8Ts3zEx2DjVR8E68; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=tqLQSsqQd0ykvR0K; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-47f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 678\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1151,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (1142)","md5":"317a2201ef3851dba19e8b41380c8518","sha1":"69f8afc7452ae5bbffe308672417d74ea784cee0","sha256":"64cbae9ec71c97c3ca661b3a42c7f0de57972f702378830b7911e5a148b1cb0b","sha512":"4d8e02b904019b8bc965749301e7a14aa67543e54a8b2a19862be134620f94b55e7a2481c50590bf05fc5b7f6ce8e54746b77e238fa7b3a83fbaf81345be42c0","ssdeep":"","tlshash":"372130aebb3aa7bc7c245a5f42306f30f0132096ffb8945cb8d22126e3425a155640b8","first_seen":"2024-06-08T05:57:25Z","last_seen":"2026-05-26T01:50:53.816934Z","times_seen":119,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/faq.Dx4xxoOZ.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/faq.Dx4xxoOZ.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=ZqGoZLSelB7e1PRJ; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OYLumJ3Z5frj2qUG; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-2f6\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":758,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (757)","md5":"b132efc1ffee39bc28795989fa8e0bed","sha1":"54adb51c65c38803c91914ee553ac952f5f097eb","sha256":"b03d2fe5bf664f98d5b21c5df6533dd2a6ffc6e18beb48ec0057f4302d04f392","sha512":"6352bdbe0cdf3da54993a67b0512f34602ac88b2ae5d61c96d522e5b392c70c2a94d76528be83bbeaad534686dab4ed763ab38d3846ea26d9699f22bf914661b","ssdeep":"","tlshash":"ab014503b46c3c2a604fa108a5d336673131f51f9269bab9b9106904cacbaa923613b7","first_seen":"2025-08-09T06:39:59.133812Z","last_seen":"2025-10-14T04:24:50.182232Z","times_seen":13,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CYqDhD_K.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/CYqDhD_K.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=007COD25tAJiNYB8; __ddg10_=1759615532; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=RZXQeZ4eDQH0vpCz; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-4b83\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 5\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 8159\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":19331,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19330)","md5":"1bbfaa6ac14a0d4a4f6a2bdb50403740","sha1":"da1db6943edc34407d541bf0999bebae565a73bf","sha256":"75a2ab6b9337408f843fde1e6ecf53fab99814a48dc12f1744621095a45bc852","sha512":"585e1e94ae1be8697cb4217da30bc9a3c01726a9e4ff4664f8a888ea03fa639d8a97d603f95684fc8f37b006f0ca6b67619a74114c7924cfb1d8a1646781c6e2","ssdeep":"384:gbLmDw0GjHIVo6eR6o1Shl449OsLV5jbHQ6NhWWxZ9HqDXRoOkm4Zes:gPmDw0MHIVo64X1NdshJTQ63WUG4h","tlshash":"479295c832c7f5968793197681bf100bb23e6d85a40d8892d53ae0d87c7486c867bfed","first_seen":"2025-10-04T05:11:03.43668Z","last_seen":"2025-10-07T18:16:30.136146Z","times_seen":8,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":247,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/se0nEqBJ.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/se0nEqBJ.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=007COD25tAJiNYB8; __ddg10_=1759615532; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7wm8ovmUK7Jj8Uv1; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-603\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 5\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 854\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1539,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1538)","md5":"45b84c2348d774f82d8c590b4fd62b61","sha1":"4cfe5c94be3b912aa45239c0ec16bbaf18e7d144","sha256":"d2aef44d67affd4beae60ae1146555d727c47a39613078bfd3282ac6cf7a03dc","sha512":"a2d49407527b6f3dc77cdcde891b7be568b9c4024690683281b20cf17b76d0ba7788574d7bcd1d04a18a025956984b11a70bea7262c899288ce06ed28c8df8fa","ssdeep":"","tlshash":"f431320c380960bb239253e094de044ee258bd617a6bc4c5e2cc7d677d27599dc8efad","first_seen":"2025-10-04T05:11:03.407247Z","last_seen":"2025-10-07T18:16:30.088067Z","times_seen":8,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":245,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Loading.Bk2PI8_1.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:26.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/Loading.Bk2PI8_1.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=ZD147zRyhIzGWfmm; __ddg10_=1759615526; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=bXPsnMBDCgWYYaE5; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg10_=1759615526; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-ee\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":238,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"972ff87ed4252206f8f9d733a46cb522","sha1":"9998cd5afd3ccbd6aaa949b68fdf49bf05224cdb","sha256":"5ae8f77f7cb1ee4548d819e6f03fe4e3fbfcc50845c8ee77480d3f08a86de00b","sha512":"1dd31797719cb3c45a9694f1e7dc1bafddbe7da579d78d6aba797d4599ac185310493de67489970b64846b0d612979cae66138ad87b50721b24adbb78cfcc180","ssdeep":"","tlshash":"51d0a7d5864444530f670a3311cc5d59c8b02ec2c8be1c1eb399d1aa03492a933b7e69","first_seen":"2024-05-07T05:56:59Z","last_seen":"2026-02-25T19:06:54.055809Z","times_seen":57,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/cryptojs-aes-format.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /cryptojs-aes-format.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=8Ts3zEx2DjVR8E68; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=btJzcYQLECfxKiZz; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca2-5d6\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 562\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1494,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"e6bc38f77922eaa6f1b23716034b4a2e","sha1":"db781b1e30c4f2a1d63d47054f0903c463cf01ab","sha256":"9ca00bddae85e30d59672da0089ea5e132df97d75a92f42114fe1befbaeaf32d","sha512":"0ad7c00c1564d77f8463dfc81003c0d6cd6ada4e3d01094331f72847f17718e4a6b2c7a2a0bcbd96a1107bc6cb9bcb1721e7b2968ae4544595ab98d39bb30c82","ssdeep":"","tlshash":"163177407debb4c287e8e1d50435a044f67b7a0ab1558ef3aa5aa404ffedf3006326e4","first_seen":"2023-03-07T18:27:54Z","last_seen":"2026-08-07T16:57:51.090464Z","times_seen":717,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/roboto-medium.eJsCudPf.woff","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/roboto-medium.eJsCudPf.woff HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=3cSQAEPVUoQw1bC3; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YlnAXzI8txooIkEm; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\ncontent-type: font/woff\r\ncontent-length: 140892\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: \"68df7ca1-2265c\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140892,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 140892, version 1.0","md5":"cf745939a2f0d88aa9e9e111d03f0c44","sha1":"e3e7869aa64560578586af40a475c0dfa55b8b77","sha256":"7090bfaf91390512f722b859fae9585ec5f662e31fbc00a0a281859f92c54c4e","sha512":"ff2483368f008496135c596a8b2863a9c5953a52041c85e03d3c01e6d4cb16ee74efb5411da034b9606b1a23e2d77ae472c9bfdc0b5358440d96c2a9a22232cf","ssdeep":"3072:tyGRtev6xczb/azWnXkjS3k0wzb9QZyKqtU0EzCq5YLA6+Txvw545N:FGiGzb/LnUwwzZUWN+B","tlshash":"4bd312b5d6a53397eef8fdca71a80f62279dbc48e8ec8f0b251c48543507ca9c276520","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-04-25T06:32:47.456343Z","times_seen":66,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":90,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/analytics/events?event_name=time_first_load\u0026pgi=GTM-KN757LMM","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"POST /analytics/events?event_name=time_first_load\u0026pgi=GTM-KN757LMM HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 602\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=aiHdoEx9yTsgMCWE; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyOTU3MiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YURsT9CwjiuslMow; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/9bCqL3Sq4AdTT0AyeXlFd3xk7reJ4r6WToNhSIw4.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/9bCqL3Sq4AdTT0AyeXlFd3xk7reJ4r6WToNhSIw4.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/webp\r\nContent-Length: 130614\r\nConnection: keep-alive\r\nlast-modified: Fri, 03 Oct 2025 10:46:23 GMT\r\nx-rgw-object-type: Normal\r\netag: \"2319b340b2d2b807a352f2e9dd462c50\"\r\nx-amz-request-id: tx00000a41ad6fd2bc851a6-0068dfa980-173861bec-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":130614,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2160x960, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2319b340b2d2b807a352f2e9dd462c50","sha1":"a1b5934ffb184c9c05ccb3d659db5e9bad56e7b7","sha256":"5861c01f0b26eb2fc0c38beb8111490b638dbb82d593060c202bceb588fb661d","sha512":"b6777b32e7692923cafd4efd4a73a78561181cb893f23797d9a8fc623701e3dc38f67d70444225a2d5268c44e8c12d3fb8873a65b463d3a3f00a61bc994c4232","ssdeep":"3072:OCsJIq/X0mrFyZbIo8bup+tfKqc+yNxRlkFanD:OrIqjFGIgEtfKXrRlkFsD","tlshash":"0dd313a4d8f09a31ed656c712894cec3dcc2686ed17ee5190e414d364af8762f38ebc9","first_seen":"2025-10-04T05:11:03.345429Z","last_seen":"2025-10-09T10:23:07.216811Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1095,"timings":{"blocked":1064,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/regdep/pc-v2.webp","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/regdep/pc-v2.webp HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/default.0Z-hrgpm.css\r\nCookie: __ddg8_=YURsT9CwjiuslMow; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyOTU3MiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=axWMToMevviSY80o; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 94832\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: \"68df7ca2-17270\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94832,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9018a8fdf0ff36253cc1f72bae5bf4df","sha1":"88daf79e98ed2da74ba53ec9aae175cfd92623b7","sha256":"531a28deef62525b83cd993c9239116f7a447521bccc88aa475ee76e17a8087e","sha512":"12b075ab073d229a491fd04b96b3baa164a6da07fbc8253959238712871059d7926df356012c8ec62ecfae465da0bf65205617b1f78820bd042c21a625c3f432","ssdeep":"1536:iaWi0jre92XKVGPJzAcy9iQNvOWRRFEE7itL3hasvBaUnbqykQrRvMMB:iU0jre3gPZAF9iQBO8SPa2beC","tlshash":"069302be4585d39cff3d773dac66f360abcd15645032eae12d84335aa698672c13ac02","first_seen":"2025-08-29T06:11:21.03738Z","last_seen":"2026-06-04T08:51:57.410112Z","times_seen":96,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/eurostile-bold.CvV91m_H.woff","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/eurostile-bold.CvV91m_H.woff HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=3cSQAEPVUoQw1bC3; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=s9p3R82eqp0cEVEK; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\ncontent-type: font/woff\r\ncontent-length: 96804\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: \"68df7ca1-17a24\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96804,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 96804, version 1.0","md5":"2e116fd896b19f31034b0dec4106d2e1","sha1":"530e6e27f2941307b1e26f260c3a4ccf855fbe7a","sha256":"428c1711732ee01fd5bbbf9d3a4a777a83414f1894f5399d77b22dd3bd50c523","sha512":"3eada120506cc1280dbb2e199acd4a386983f855771ca0e71bd2cb810d26ac50436165ff029c8c58e0506471675d5db59e7519781495e763fda70c1ee8fe9061","ssdeep":"1536:sBOXXEUF4boG1Y6VafRnAPwQIF+RqAW3z+57es+v39nzdEvF7y4TGRYhgil:WOHEUabN1YcalOIFMqZgCsI3dREW4Tr1","tlshash":"b4931220d9f1293570275f7e60deb491bb04ad5068e07ece2873cc569fede64b729920","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-03-01T21:47:53.474623Z","times_seen":56,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":88,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/ModalNew.D0RF2N-h.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/ModalNew.D0RF2N-h.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=YURsT9CwjiuslMow; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyOTU3MiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=yOl1tEUsADrAO5t6; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-2e5\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":741,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (740)","md5":"6efb4656a407f3686b166088151a886f","sha1":"2f2681b413a7cc3ed27ad46eaa009ec8d32be3e1","sha256":"21d1100f0fea9e17044195d8dbe0e45933d1d7ae10e86b7c2db5934b11076060","sha512":"638b13027faf5daf31a0aef39a5df4894b46efe1253a9e323efcad0b85d8fbe0bf7aa11189f078b0c22267bde518631f5cb9b8e2de15065c9cebe8fccab42687","ssdeep":"","tlshash":"8c01f9b12d6c926c30afe143edb74f98513517b64717eabf9d3071a14cab5c138228c4","first_seen":"2025-10-04T05:11:03.455562Z","last_seen":"2026-04-15T02:03:05.939501Z","times_seen":57,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/collect?r=3809255","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"OPTIONS /collect?r=3809255 HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwch64x.life/\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7NsrNm3YfT42G2Lp; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg1_=anQazo7O6GZCfLwkiy6A; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 9e0bec82-5188-42b4-a218-3a558c890fbe\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/SliderBlock.B3wtTtBU.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/SliderBlock.B3wtTtBU.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=9l4jof0J2NaQ6Zdg; __ddg10_=1759615530; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=qvzM6DYC166LlIlJ; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-9a0\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2464,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2463)","md5":"635b450980ec985e9dca2c76cb79c669","sha1":"b6021606da515caf47e8abf4a7989b5c50f973e8","sha256":"2c1263da32b4c80f084553254d0373c6d6cc111dc02aed38a5e7e16add47681e","sha512":"97f983e582acb44215ffe76d4d2c9b820f643cbcbf84f93841c4e61758340d39bcf2f30247461a9b72a064e550a2d64ef7146dd9e97d16aefe0edeccde0bdb9c","ssdeep":"","tlshash":"9351cb701a223cbb5621e75bae459caa70c8d96b5f13e1fbd148f024c2cbdb1dd16283","first_seen":"2025-08-09T06:39:58.865686Z","last_seen":"2026-01-21T08:18:56.964591Z","times_seen":31,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/js/fp2.min.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /js/fp2.min.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=8Ts3zEx2DjVR8E68; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=BFSX9fV7KqdFGxBR; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca2-883d\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 11235\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34877,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (34698)","md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/C7dbclZ-.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/C7dbclZ-.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C72coOWc.js\r\nCookie: __ddg8_=QTv0NOnNCsLmc82E; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jyTtDnazfXCVdlqw; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-457\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 491\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1111,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1110)","md5":"95814635ccf28c50f7025b84ae665292","sha1":"8e7e49c92a940b1a223f5edffc0141d2eae81daf","sha256":"9a5cd10c23cdcfccc8d47bb126a9dad6ea543a55ac206a7126e60d4d69842962","sha512":"63952aaedcd202a8fe7a84815bbd88419337298120c012e558f936441376d532b8dd5c8cf97defe4c1afd5673bc89c62df73e4443c57f573c8e74a95d703070e","ssdeep":"","tlshash":"9021357d4aec2dcc491cbc842ad89d6c7504d249a191cc9638a6fee7f487d5aec48471","first_seen":"2025-10-04T05:11:03.592519Z","last_seen":"2025-10-07T18:16:30.123656Z","times_seen":8,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/bonusWagering.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/bonusWagering.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=3cSQAEPVUoQw1bC3; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=lkCjjuVr12wkiTYk; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-652\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1618,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6630c9a6d86e7827d983c8afd4f3c47c","sha1":"6d52149d8636231b07cb30c3da8f7549410edca9","sha256":"2ec295a534e212461e58cf5dc3048ffd1207a417f03be96c22ff0f2a0462652c","sha512":"7802023b06e8452ee55427dacf6914bc7bc7ab0695a974a031f0a68e2b14a3b2c7b5423fc8748a852f5ac8c43ffdf545ac9dcf9ba5959f385ce9f9dfe7a96f10","ssdeep":"","tlshash":"7931c2faa2c4e6f19f436392c8a0a038f74b106637580f94a370d7d9fb7a05d4a49cd5","first_seen":"2024-12-10T17:19:34.230323Z","last_seen":"2026-04-06T22:48:49.699125Z","times_seen":62,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/images/upload.png","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /v/images/upload.png HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 5607\r\nLast-Modified: Mon, 29 Sep 2025 21:14:19 GMT\r\nConnection: keep-alive\r\nETag: \"68daf6ab-15e7\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5607,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 252 x 192, 8-bit/color RGBA, non-interlaced","md5":"7b5802fbdfcaff9ccd0826fa008c38ba","sha1":"bec3747315222740af2524067fdb193ba5cd3dd4","sha256":"455f8ff96a7775e51c6766e041b6d94f324729236e4f11cee602d5374d4c70e6","sha512":"0b0a952f2f4ee0b4db1f8d195fdbd81487e6c34b2b1d72a3fda1870c6d8eda43e4291e2a0cb5a060e75644ee6dbc2e1e2932aa10e1027b578d4691c87187b26d","ssdeep":"96:bJ/0V4UQ9C6HWpAK6a44RkRMeUkucxOx5QUR6eDJHV7IlH:V/2yHWpHiTgkucxI5QeDJHV7IB","tlshash":"7ac17cf769d8da9a70dfa9e043237872f8041b2bc6f0f356a8298097bf15c41f961301","first_seen":"2023-05-01T22:32:10Z","last_seen":"2026-08-02T00:07:57.72238Z","times_seen":2300,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":126,"dns":0,"connect":41,"send":0,"wait":41,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/IcAGK8rsSoKFLxIQ1c6sAX5GaB8NprJBYDZUCmGE.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/IcAGK8rsSoKFLxIQ1c6sAX5GaB8NprJBYDZUCmGE.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/webp\r\nContent-Length: 52922\r\nConnection: keep-alive\r\nlast-modified: Fri, 11 Jul 2025 13:37:42 GMT\r\nx-rgw-object-type: Normal\r\netag: \"5a2f747da7d78cb5cc737a923e62e34f\"\r\nx-amz-request-id: tx00000c9e29337ccd7541c-00687113a7-165866ded-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":52922,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1380x736, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5a2f747da7d78cb5cc737a923e62e34f","sha1":"dba040d146830993638ba0b79258a5464be2272c","sha256":"bc69ed55d7377a055860214d481871ab43570bb677d2ff318afb2f8c3b84e3b2","sha512":"386dba7c18ce85a50b0f22806354e74077a90d3d75d283842b172c1df1d943381b290b3e9dc2fcd34a73c5d5302094c4313b1850261966a597923e09c9ef0a76","ssdeep":"768:6tZfvQp6iytc6tnMkDzmcG0fbbwZLcDU0Mit5JpBz+zhHW6xRmxmsbijG47EzYHP:8ZN5tfz1FvwVcAEpBzuh26e2jGeEzA","tlshash":"2e3302542bfb8d681fe6603e5a8da9c3279964c0030fe98c7df9266c81b5c5c0a163a3","first_seen":"2025-09-09T11:33:29.133055Z","last_seen":"2026-03-01T21:47:53.212166Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1181,"timings":{"blocked":1152,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"licensing.gaming-curacao.com/validator/?lh=511aadd110f565d008810403b6cffb85\u0026template=tseal","fqdn":"licensing.gaming-curacao.com","domain":"gaming-curacao.com","tld":"com"},"ip":{"addr":"104.20.27.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaming-curacao.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 06:54:09 GMT","end":"Sun, 21 Dec 2025 07:52:39 GMT"},"fingerprint":{"sha1":"CB:C4:06:10:12:79:EF:B9:B1:55:67:30:75:91:9D:38:00:A1:7D:84","sha256":"C4:2A:11:7A:04:A8:58:3F:EA:C8:EE:C3:3F:CC:EA:68:AF:5E:C7:F0:57:F8:47:C4:A5:09:22:E3:23:64:C5:B0"}}},"request":{"raw":"GET /validator/?lh=511aadd110f565d008810403b6cffb85\u0026template=tseal HTTP/1.1\r\nHost: licensing.gaming-curacao.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: PHP/5.4.16\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: private\r\npragma: no-cache\r\nx-robots-tag: noindex\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IeFaYjnJG3Eg6zwRyBn0kpOM%2BrhYLoBHS9j50MeW4ohbVk0YZg6v8tL0oKq9K2eREbRXXyNc6dk5%2BEHl3e0eE%2BWu9zLxe%2B6gU4krISxdv8EjwXbRqsEM3I1y\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: PHPSESSID=aph9k566q43h7155fgpqh0b5e5; HttpOnly; Path=/\r\ncf-ray: 9897fb2929c5b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:5.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":729,"timings":{"blocked":0,"dns":139,"connect":3,"send":0,"wait":433,"receive":0,"ssl":154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/h_1x8YBl.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/h_1x8YBl.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/CAMO0y_7.js\r\nCookie: __ddg8_=ACeYYLIdSVmyOMzI; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ThZHyAPtUUaeTblI; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-282\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":642,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (641)","md5":"479927b2e5ced4c72111060e612a8101","sha1":"8e0446ead528e4a22e7ae415cf8a33a827bf4328","sha256":"83aa9202c9fa72b8f8f5db84b29fb79e8314823450c10a599a5115cbf895e6a0","sha512":"51a6f2d081f5f1a3d91b597440da964d0f17725fc7653122cc1601b3b069d62d1090d3c5d0a165f44a62a16720b76da580a27f5b9ccf0a95e6e1bd33dcbd317f","ssdeep":"","tlshash":"64f0ddcef414df33268309ce4023aa3512913d5c663032b096d382b148cb01de3acbad","first_seen":"2025-10-04T05:11:03.398279Z","last_seen":"2025-10-04T22:06:20.867269Z","times_seen":3,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CIV1DmJm.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/CIV1DmJm.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=007COD25tAJiNYB8; __ddg10_=1759615532; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YU00SxIkHLSBFCnC; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-36a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 5\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 438\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":874,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (873)","md5":"3bcb3cb731faa08f8e975f22576abf93","sha1":"05344c9790022a0d796fe682cfba3af36a0347db","sha256":"ee27ce8fd95c8b0501fb72850528edd31a3d0195819a462635ca117c897cc60f","sha512":"73d6c16f46985d8259360bab931cb67e77640c8585a6ef8df1950979b4eae173ae318c351dbd07548a5d6d4b28d596f35c41db8840566f386f52f61fd70fce23","ssdeep":"","tlshash":"0c118cc070a4a431c3b849c801d5abb2b55d96843de782d4e45e1d33213f89cc579b19","first_seen":"2025-10-04T05:11:03.497488Z","last_seen":"2025-10-07T18:16:30.088926Z","times_seen":8,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":246,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/eurostile-regular.i2b9H2-b.woff","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:26.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/eurostile-regular.i2b9H2-b.woff HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=ZD147zRyhIzGWfmm; __ddg10_=1759615526; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=rNszKNoA9OnWOAxR; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg10_=1759615526; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: font/woff\r\ncontent-length: 97680\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: \"68df7ca1-17d90\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97680,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 97680, version 1.0","md5":"535b1e86232aafcca96b143529c8226d","sha1":"9408a42efc92ea6972f4d0f50560c22ca84d8a08","sha256":"c5a7a7d506426bb073f4f866f0ea9f3c57c8e856444e5403494d9db263e85671","sha512":"b54f1a43cd21271056f02d0626c573357b3ad962969d24a7c03914513d6644155108d5fb0608d47c734e650e1141de70cb9cc13e1ee1f08830c33ecd7dbb8abf","ssdeep":"1536:mndVS5OB0M0Lfxv9JKgzmzwv25WCnEx2pW594UIi/m3KYdu+WLSkNQ:mv3BbuX0gswcIb4UIi/m3K4u+B1","tlshash":"95a312039a03b7246d764afa2eaf4b39f5d4ef988d0d63c147e1a410194d52f2f6126f","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-04-25T06:32:47.453739Z","times_seen":81,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":134,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/statsGames?limit=4","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"OPTIONS /games/casino/statsGames?limit=4 HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwch64x.life/\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ilHeHyCW1W2PkwQP; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg1_=oyG1fdWpAqVU9Dnkcx8H; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 62f1094a-1d0d-4a97-b6f9-be22153a4480\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/h87hjPaLoDcjBzAyiMAnjlZgZeUIaZ1KLJ19t5PI.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/h87hjPaLoDcjBzAyiMAnjlZgZeUIaZ1KLJ19t5PI.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/webp\r\nContent-Length: 57076\r\nConnection: keep-alive\r\nlast-modified: Wed, 10 Sep 2025 13:37:57 GMT\r\nx-rgw-object-type: Normal\r\netag: \"9f3d3451c418ff41b859b6d7e2a4bac4\"\r\nx-amz-request-id: tx0000053b665c508ce9668-0068c17f37-1739d9a9f-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":57076,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1380x736, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9f3d3451c418ff41b859b6d7e2a4bac4","sha1":"be34ed90905d7be18bdb826679a1b21056c9451b","sha256":"f4ce5c5b0a6718ba35f7924b19ceb3b9d871d9e462737e1a70548b52844d5ce5","sha512":"8699fd7af8666e942956c9b02e17f3104dc707e283d94fae8b11317d120a4534ac73eef3626e00947192c7eb0e9d653b8c96a75c53bb480b4f307f60b6bfd5bb","ssdeep":"1536:oOarTxraavKhDpvu0XGzYcIVPqnAaSU+7e3kRBU/MvZd9BQxO:ovT5tiD25zmCAWQe6UEBd9BoO","tlshash":"7d4302f02ffcda5015251d959c29634ecfe8c6c506f41b87906ac32a37c63fba90870a","first_seen":"2025-09-11T21:42:04.018979Z","last_seen":"2025-11-10T22:08:33.823846Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1175,"timings":{"blocked":1146,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DXY8KlFG.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/DXY8KlFG.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/CkMSVCQx.js\r\nCookie: __ddg8_=l7hkYJSaiM5KUGbK; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=gtfhhRdbTkB9gvlo; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-2146\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8518,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (8418)","md5":"01f853759ae111c06ef073d1cf06f478","sha1":"d0ca8cc9b2cefb9a8cdeedca60eafe91bed7d4e9","sha256":"7c41de0c8c2c275357d4378ab0dd2686e2e9b0f0c2de6af137d5551daaae2ca5","sha512":"1882700c6d14d6732e1f0defedd3b4b678d141d427680109ad069bb738c30771b557b90e20a5c681ab41c9bffb1f8e6a0a75446fd11b97cbdf10ad59530236c0","ssdeep":"192:bJUITj4C++k9G2qKeYhKJ2qrMBHTxOcfsobj:bJUI69wYsJgBHTwcEi","tlshash":"9502ea8ada554d38bdbb1de028fd4206313d2fbb91c4cc1369f85e289f44ee55a2536c","first_seen":"2025-10-04T05:11:03.412248Z","last_seen":"2025-10-04T22:06:20.877933Z","times_seen":3,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/kagaming.png","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:33.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/kagaming.png HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=E84MRGuiUrbMTfFB; __ddg10_=1759615532; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.143; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=f9dgo2W9uw7b8OX3; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg10_=1759615533; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 2844\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: \"68df7ca2-b1c\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2844,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"c73e8335e02c283c022ea47f9b072f28","sha1":"1587e6a4ad71337f14b822fe81d535b8fa41a793","sha256":"e01a0057456828bd333d553d66e4edb9bf36cdd9f797f70fd0eb925807d209fe","sha512":"6afc2ca7fdbe5e2cd3680bb6c95b3e249bc5f03bb817e6f4d21e6ca5db975ba7c3fff0f912d046d881df97dbb4f4e93841656fc89ff9e73c4c7217fa92aa2cab","ssdeep":"","tlshash":"df516db575b034615e9012f8180f11089bc299867903aaed800bc137ebc90a6b3c02ff","first_seen":"2025-08-09T06:39:58.927401Z","last_seen":"2026-04-15T02:03:05.950904Z","times_seen":62,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/batch/","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"35.175.162.132","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:39.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 15 Dec 2024 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:07:A5:B7:4A:00:EA:45:09:50:EF:4B:44:63:83:38:E2:97:F8:13","sha256":"6D:1D:1C:48:82:61:EB:EF:E4:D8:57:9A:EA:F6:ED:0A:07:BB:6C:17:71:6F:A3:F1:88:57:DC:E3:A4:E8:44:96"}}},"request":{"raw":"POST /batch/ HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwch64x.life/\r\nContent-Type: application/json\r\nContent-Length: 1505\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Oct 2025 22:05:39 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: https://gwch64x.life\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 39\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-08-15T10:32:30.373936Z","times_seen":44969,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/BbqPNdSU.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/BbqPNdSU.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C72coOWc.js\r\nCookie: __ddg8_=QTv0NOnNCsLmc82E; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=v9urzspvGgEL1OMm; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-21c7\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 2870\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":8647,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8646)","md5":"d41b27ae63a30ec5d67cd47eabe3049e","sha1":"d1c10551d8dc1c36a70afbd414a0536cf64bc8b5","sha256":"d15f6a0302235ea1ec65d60e9c153f9edaf3344ac40599380885512fe83dea5c","sha512":"44f9246dede1ff1a1665f88dd0042c43ecefd28cf64dc01d4b34d60c88b6fa95255cf0185582c3c23a88f8edd54fb01d8e47576c7aca101ebc167b8de3f2b05f","ssdeep":"192:tXiFojMIZjkItgj6pnaJe/HA9iReMDjHMtpgCtAoRXSAd55rD1W55Jr0UWip8W4a:xiCMIZjy0LhYRHMAhPMN07i6jC","tlshash":"1c0240de520a64b00bd706fa81e846d0d6b00844f04d997c64f8dddf477ec8917a6bbe","first_seen":"2025-10-04T05:11:03.58126Z","last_seen":"2025-10-07T18:16:30.056453Z","times_seen":8,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/f1ea0268c65d44babe977efe24e26c4e.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/PragmaticPlay/f1ea0268c65d44babe977efe24e26c4e.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 21180\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"caba909a099d14aff6a7e561c32c1188\"\r\nlast-modified: Mon, 06 Jan 2025 19:15:51 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18507B24A9C70587\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 1902\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XaV%2FVJ6Wm9uS3I8Crl586RdYDySj7cX60S3IOPxZsbkrfY2GkpWj1SZvdu9B%2BFtBUBzQ1XcfY8IUtmi31uMjAYKrC3okXq14QZ%2BT%2Bk0z\"}]}\r\nCF-RAY: 98978bf01c7266e4-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21180,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"caba909a099d14aff6a7e561c32c1188","sha1":"19ef91a29efeffce8f0b883fa8dcc3eb782ab517","sha256":"a76fd0f65594c7272a36473700435e11c4d7f11e09b9be692ae123c798636459","sha512":"1567b26d6dd3d5e58400f361d601081a7e47acb6bdbc3e5dfb49ae1a3cd14dd36512e5fd5a4086d635effb29ae88d23617e8b4a916dca64254c172f523225f11","ssdeep":"384:w/4xu/kaWg3JOlpnipL/3cX/PGo2kcuHPSVtBuuuUQybJwXWKxIp8zMrGSR8:wwxRRGJeQYHGFxbXYKpbJGxISzSW","tlshash":"5492d1094bf9533eafcb4a44b638d3536791f86b2ec4c5a44746df0489ad57058cbbb0","first_seen":"2025-08-09T06:39:59.151237Z","last_seen":"2026-07-12T17:41:43.893341Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1723,"timings":{"blocked":1695,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/yggdrasil.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/yggdrasil.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ItMjwkGRIGO78wgW; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-645\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1605,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22ab76fd2733beece31d373c5e90fb94","sha1":"e6497bfe5c5b19a7c8f26dc2a802e85568e3485c","sha256":"64865a4891c08014fb03901360fa286e30c8da4b91e2304deff972033bfe9033","sha512":"3fdd3bea110dad310680d49d03f84a317c21f12802e7e3e5cd88862c7e72b2ca0c2fed8c6fe428d9ead9bfd3f2aaccbec5dd583ad16280ae40513b89ca063b4f","ssdeep":"","tlshash":"723141f7e39892d0ea069bf90a1b38b1342b3ce73d63c58d59566895f19019f84d4cc7","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.898772Z","times_seen":69,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DXFcmPY7.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/DXFcmPY7.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=NQbcYpHEcdeIDRJ2; __ddg10_=1759615532; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=MygbwLxO32gkaA9i; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-23dc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 5\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 3839\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":9180,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9179)","md5":"f35775ff648ec6716f2a297601310e96","sha1":"7305e85cbb919d8b85f3a5930e3f296b5e6fa785","sha256":"4511ce05d79359267133ee9e7e89fe59be13436a70679dacdf294e07de1bdc6d","sha512":"c81450c578ff1a8ef035a1d56429dd637b3533bde838720faf99a48ee0d1805b8f24567ecb757ca921606067907d517d04226b17383e91d3a37c4fce563a34f5","ssdeep":"192:XqsxSEFu6ZufGq++k5q2IkZQ+tOWwYpsTctY0ipgNE7oVKRpnKFEN:XhZ8fK+kQ2IkDLwYpfYZplOKRpnv","tlshash":"c212e9e473ac72aa59630dd12475481de434e6243b26f4d1f2ba38bab497c44b273f2d","first_seen":"2025-10-04T05:11:03.241006Z","last_seen":"2025-10-07T18:16:30.134044Z","times_seen":8,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":225,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/vip/mainPage/star.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/vip/mainPage/star.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=3cSQAEPVUoQw1bC3; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=gjhLEQ9Z9Q6i7bY2; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-c33\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3123,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a52a0c3104e4ce6b3892f0cb079d27e","sha1":"9315a6cd602fb8d2477a0723f587307a43677cad","sha256":"49e08c929ab24a51bdc8935d0b1c7d8841abe3025755cc735640f3e10d218f87","sha512":"2db493ccaa35d93a4f7220c3c520057b9fea5d5cf79c7dd8faaa22e74e8b2ae3c7f839fcc3096a7c1c0d23e91fccbd800d98b2d679888a04972d7746ee368fcd","ssdeep":"","tlshash":"bc515af639ada9dd9c879264d3a95c900f3de1b4f11084699d8f0a31c09bcc6f5672c8","first_seen":"2025-08-09T06:39:58.898385Z","last_seen":"2026-03-01T21:47:53.493327Z","times_seen":39,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/footer/lvlx/default.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/footer/lvlx/default.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/default.0Z-hrgpm.css\r\nCookie: __ddg8_=3cSQAEPVUoQw1bC3; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=XYPLD4aa4bQJAzOM; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-131f4\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78324,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"861bc0fbfe9e67f911533676dcdc95e4","sha1":"711166d32abc201afa9c14ff03b0cb98d4e4e35b","sha256":"df69d312fe8509a839802cd82fbea21cd863aaa4ce8ffa08c99fe0cc19cf2356","sha512":"1688c6f57916f56a146dc129ffaa617cc9e74eff2c46b431edbf8a643fd3f2bb81579afbfac3ef3f5f7d4049e452ba0966ca24b3481433438c32e5e56aed7648","ssdeep":"1536:wc/a8s+S0v+DRGkZHWQwaESSt7hSZBwmsAuppsPV+HJM33iM:5TK0TJ4Zmm10q","tlshash":"e273c7dc6bb405f0dec593daae2908a97c2765fe2d815d28c21c5f842ca1e6ccc65dca","first_seen":"2025-08-09T06:39:59.049635Z","last_seen":"2026-04-15T02:03:05.856061Z","times_seen":68,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_ipx/f_webp,avif\u0026densities_1,2,3/img/tournaments/cup-desktop.png","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_ipx/f_webp,avif\u0026densities_1,2,3/img/tournaments/cup-desktop.png HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=axWMToMevviSY80o; __ddg10_=1759615530; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyOTU3MiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=HRtao04hWIYet2rX; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\ncontent-type: image/webp\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests;, default-src 'none'\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\ncache-control: max-age=60, public, s-maxage=60\r\netag: \"186b4-7apePpsuTa6OkOlxkYYZTp5dD3I\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":100020,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4fda67fb1f219b51734a424ee8bfed2b","sha1":"edaa5e3e9b2e4dae8e90e9719186194e9e5d0f72","sha256":"b00593999680b32a47ec2d142bd1a9e45238f392351c56353ea904d1beb60cc5","sha512":"09cae252dc84b051ecf26be9e8019241a49bf4c81cf8e5f6f86a6c9b3fda99bc9bf85701652a2eef91a0df56c5b88c4d1ae2aed38d34ce2dbedaf9c1f28e7a14","ssdeep":"1536:2iUNqhSFbeDH84FedlkvMLatgbDMYdeeY8oDaeOlqp6x13kzLxRu8WoFKQBRmY:CEhSYfFedyELlDM6JvRxdkzLxzBgY","tlshash":"98a3125ad5e2f613e648ceb6e23cd33c57f63e8b3a1976062db1214ae5c152c063943e","first_seen":"2025-08-09T06:39:59.110732Z","last_seen":"2026-04-06T22:48:49.663318Z","times_seen":48,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/1393b69d6f928c7230bda26ec032a23c.png/yvuJBhAavxDU6ND4Ul1D9vlsGdgQVUshrkcGtkQ9.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/1393b69d6f928c7230bda26ec032a23c.png/yvuJBhAavxDU6ND4Ul1D9vlsGdgQVUshrkcGtkQ9.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 374100\r\nConnection: keep-alive\r\nlast-modified: Tue, 03 Sep 2024 06:51:35 GMT\r\nx-rgw-object-type: Normal\r\netag: \"4de62d9e6879435915381cedfa83725d\"\r\nx-amz-request-id: tx00000cf604f673a7c0df9-006867c49c-162d5ff72-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":374100,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"4de62d9e6879435915381cedfa83725d","sha1":"ab1c2425f1e58f66d61eac3ebc4fc4fff4886cfa","sha256":"e326b99f9cc358561e0022b4be85b3e30b55c775dba2e72b01cfea76f6fe8ec4","sha512":"777c5f727e78a41a24d6587820a6001744c989ae935bc4a0bbc3548567f7b89501eb695da7d67310d3d7a1dc451157dfcef6208c3b78cdada01a4a90a6051b07","ssdeep":"6144:UJzJg5eOlf4iGU4JVDfZvpVSZfHkUlcFe7iaJqx0s49iqjOj2sW/QFE:yUV4i3wVDfZvqZPRF7RTiJW9","tlshash":"5b842355ef536e2284126ec19c5a8e27d55882a0fa866f3f11bdf4ee4ae38c45cc3f41","first_seen":"2025-03-26T02:25:21.384691Z","last_seen":"2026-03-01T21:47:53.502104Z","times_seen":33,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":312,"dns":0,"connect":29,"send":0,"wait":55,"receive":94,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/4818c6efe224ca00508b68206c7072ef.png/Uoz6Y4UqItavwAMZgwa8vgcq1pY1cbQ3dDfJQv2e.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/4818c6efe224ca00508b68206c7072ef.png/Uoz6Y4UqItavwAMZgwa8vgcq1pY1cbQ3dDfJQv2e.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 373555\r\nConnection: keep-alive\r\nlast-modified: Mon, 30 Jun 2025 18:30:43 GMT\r\nx-rgw-object-type: Normal\r\netag: \"87835f3d19ef24c456dd4c0b7894d1f4\"\r\nx-amz-request-id: tx000007108481b694ca6a2-006874b400-1664e693c-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":373555,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"87835f3d19ef24c456dd4c0b7894d1f4","sha1":"14cbdcaff8eaf86d4e8f26c265255036ed642b7e","sha256":"2d195884f567931a61cbaf838cca52847371c58132a31780bf89080a4ca28d60","sha512":"30316fa7c7f3790efb351fcb91cbc208f0824625058c307602642623322cebed37a4f6b6c484f53e643bba4ac0026b4bdc30622881b5457d5299f14f4033bea2","ssdeep":"6144:z+YTLKde07I0cUQZQ4DaPkPjDmpjpmUzn1fBKVWzWVpJoRqW6ls7aEFcAoKqUFWM:x4ecI0IDkkPjOpTr1fBSv4gKVFcuIM","tlshash":"c484235ab43810bcc8176b13e991eaed6aa0c836c545d72d8f4ae30b511ef6b0c5b35b","first_seen":"2025-08-09T06:39:58.980517Z","last_seen":"2026-02-25T19:06:54.224823Z","times_seen":31,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":312,"dns":0,"connect":30,"send":0,"wait":55,"receive":91,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/0b6e2e38d76c4a40bf6ab7235f92c5e7.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/PragmaticPlay/0b6e2e38d76c4a40bf6ab7235f92c5e7.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 21309\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"a0243053186e9dc6b7ceb3f5ae10058b\"\r\nlast-modified: Mon, 06 Jan 2025 19:17:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18502DF1A8F83A1F\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 675\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CpBmj3VA0lCHrWVsm%2FqTErORxhNtyS1%2BVCp61Vwz4cWBqUv6m1jpvpEamqf%2FzD6IvHlwfmK7gKWCV7DlBG4j0LEpeQaBs77rE2N2p9z%2F\"}]}\r\nCF-RAY: 9897df7e3e3f5d56-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21309,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"a0243053186e9dc6b7ceb3f5ae10058b","sha1":"b71e035aae00b689245f0966c3d9a3a7b52892d7","sha256":"458e62a07eded322f3a1f254fdfba3f49e9dba0f3148f47da7844697c11801ac","sha512":"54fa56177a5a8f0503c6908bb91fef479aea4611ff61b6f614e6b941eca458b49b5c0071b5f82ae6ef4f55be4b15554ebb9a36fc17026b4504d4824c017e6678","ssdeep":"384:wWvwb3jEKZdinOjA4JKcRA1lNSpNEalUMfTHrt/buMkgIeGfe+:wWYbTEm0Ok4J/G1lN6EayEHrt/C+3L+","tlshash":"84a2d03a9ef5c6391a19b6a0308131892f0986b3f7c9752bda296543ee3d91784e6488","first_seen":"2025-03-21T05:40:09.025565Z","last_seen":"2026-03-01T21:47:53.218484Z","times_seen":41,"resource_available":false,"data":null}},"time_used":1721,"timings":{"blocked":1693,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/entry.B0BOi0i9.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:26.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/entry.B0BOi0i9.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=bzfSX9mw9N9VCTPX; __ddg10_=1759615525; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=DtiJhXV7OLsMIle8; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg10_=1759615526; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-1080\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4224,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4223)","md5":"61f0bd26cea7d117c5e7c486acc68d00","sha1":"6c8bcb0f1c4f0fb0f07276c5eacd898124ed10df","sha256":"f099b430b92e0f00145cb9382b4a9ae5fd988a1e4f4bfb3043e5a938efc4ee39","sha512":"f9bc1136e2349b7ac1471ec7801d8047312f950e30808796e33dcc45bdf4cc68b709d9a30c6ae3f2cc7371b4d47bd532b8cc59e09569e52f1d9a1b30cb0b91c2","ssdeep":"48:qBK1KVrwxo7yXr29OKJgbKA7cb2XYKBKJKeKbKaeEaSkeEnS0SSSWS8VSfHeEPeG:qxi8yK9RHN4MEBWWXIShv7JRhW4D/qi","tlshash":"4491ff7fb288f6580127ff02a4a15bddf42b23b0b2522a15f2d5523061b67d1bc29d7c","first_seen":"2024-05-30T05:56:49Z","last_seen":"2026-06-10T14:34:42.966261Z","times_seen":189,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/highRollers","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"OPTIONS /games/casino/highRollers HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwch64x.life/\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Q5XJlAKFohnKhXxL; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg1_=MgWqUUtUnZKXrXiEefQY; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 04ea56df-205e-484c-a4da-3df63e01be6f\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/19ac27414bf7761bbace0a39fa6d5c86.png/BokmRgz67SsEi82eJZwIsjAhMv5UBuRWwFBFk9Vo.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/19ac27414bf7761bbace0a39fa6d5c86.png/BokmRgz67SsEi82eJZwIsjAhMv5UBuRWwFBFk9Vo.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 420758\r\nConnection: keep-alive\r\nlast-modified: Tue, 04 Feb 2025 17:00:37 GMT\r\nx-rgw-object-type: Normal\r\netag: \"bbd8855d1093224effdf10cbc8f67c96\"\r\nx-amz-request-id: tx00000dbb58a13e82597a2-006867c600-162e91d58-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":420758,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"bbd8855d1093224effdf10cbc8f67c96","sha1":"e29b9612acff5416f51e635c1b1244cc90a8d188","sha256":"14ff994ab95587962a16dc1c6b3a85f55130d475329f687bfa3c69ce958f6478","sha512":"daccb10808b818cf777e49d7672b78ae80c5c02ca162ebd05ba8f4e86dc56c0de9514400cc52a2bbd926e262ce8fda78dbefb6848cfcb8cb944d6ac696bcc00d","ssdeep":"6144:xlGPwkyjp5zHNk0s/d4WFzpX7YcdFt9XB8FRBF5r4bTlJ3OZX6LPGEYmmkuIhrje:eTQrHTUd4WzYaFXGF5r4vsXWCOuIle","tlshash":"2494231ee511f3f2d802d9b8d75ee8307c3c68641e86b00ed6ad9ee82931d671905a3f","first_seen":"2025-09-09T11:33:28.966177Z","last_seen":"2026-03-01T21:47:53.278986Z","times_seen":26,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":387,"dns":0,"connect":0,"send":0,"wait":27,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/ThreeOaks/13475d8ae79a47b9ab864b8c99d1c41f.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/ThreeOaks/13475d8ae79a47b9ab864b8c99d1c41f.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 27909\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"4a98cfb3ada38b3d88ee47f29ca3a9f7\"\r\nlast-modified: Fri, 20 Oct 2023 08:19:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1867EBDB9ADF134E\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 3003\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NFmr%2BPykVkOQpxaATQWYOStCGojgwp60Bh2aWiKMkQu8W%2BHNu0bS8j55SIpIXpBtWVuQeV9JsVH8%2FseaFAf7jnUZUt8M%2B%2FDD0UOq0MkH\"}]}\r\nCF-RAY: 9896fac43f6db35c-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27909,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"4a98cfb3ada38b3d88ee47f29ca3a9f7","sha1":"50724d58eb2e5f1cc96d83186bfccafe0053d5fa","sha256":"8164bef11cc409666cf73f882967845bc9d2dc64174acfdc8d330a6cfe09f7dd","sha512":"e23a250b8ffffe3305a0ea58ccd0574f20bbc7ed0e954bb16a512054173ceabb1dfa556d9f9a69299228fa2c567bad309ec93dd9e7e27bf34ce8da5537f30c51","ssdeep":"768:O+WqAchrLN7L0/xCatgWIK7IbQKQSIqE4d:NbzhrhF05IK7CQKQSBE4d","tlshash":"42c2e06254434e8e0ebf4ace1f9595e987a3dc786f98b117dca32b82634012899de173","first_seen":"2024-05-07T05:57:00Z","last_seen":"2026-03-01T21:47:53.410872Z","times_seen":86,"resource_available":false,"data":null}},"time_used":1744,"timings":{"blocked":1716,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/ThreeOaks/d220f72397f44d3ab61b9942df2d58b1.jpg","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/ThreeOaks/d220f72397f44d3ab61b9942df2d58b1.jpg HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 46250\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"82203fb468e4d157c7a4ff767f482ef2\"\r\nlast-modified: Wed, 01 Oct 2025 09:56:43 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 186A9A721492DF34\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 320\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mjLlSLikn%2FYzxBkBIZpMd7fXwhOvBYzfEWblgHYQnclzNFKZ7bYQUWXZYCLPMsGTcmx2DWOe7dXLV%2FfPVYjiusEOPslCFkvpMe%2FisI9r\"}]}\r\nCF-RAY: 9897d1d62dcdd835-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46250,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 287x193, components 3","md5":"82203fb468e4d157c7a4ff767f482ef2","sha1":"f747cdd0569104a99f16b5a294c56252bf0912a9","sha256":"d2b5a09f3e9c4a735d079ca10e37ff4180d7baa1020c0decee59aecd13a4d780","sha512":"778b8c2cd640a034303199e255c006cb795cfd4c65c17a881f01d0109ad60743c9b09e01a6fb287534c450951734e3fc094283f267bddbcd6faad6bf8aebbfcb","ssdeep":"768:4YyEV+hwKhpxmWafPU7Qc+yaVmrZ4lM9IzPc3+DwEd7tjb/FXHRj4oxUi8n7LX63:44V+h9xmtEUcUVW3+c3CwI7tHdxj4oxr","tlshash":"c523f2e1c39a8e24f1c1b9ba1cc9edf4a53475165bda73903824f610bccfad8b6441e8","first_seen":"2025-10-04T05:11:03.562252Z","last_seen":"2025-10-04T22:06:20.901144Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1741,"timings":{"blocked":1712,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DI7JmEzD.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/DI7JmEzD.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/WmOt8kDh.js\r\nCookie: __ddg8_=ACeYYLIdSVmyOMzI; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NLFLcXiL0HlfGDHX; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-917\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2327,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2326)","md5":"83a8b3c06aa9f7eac9c12106dd8cf92f","sha1":"f081a1edac6e1989b200fa17f04e94d01750f4e4","sha256":"159f44488e5191a76543c322a2a9f9e2e8d50617822fbc460ac73b3abe3f1cef","sha512":"4e5487aa4e63cf5ebd78057ecc0bdc55a71a9243442220730a0602bff3798193c048f927bfcf53bdfd9b3d6fb0f47a76bc4ff749c2834cb71623833c7d762cf8","ssdeep":"","tlshash":"454112e3932448e75862e4c538e35a305b5599e8e1fa2089bc3acec5725ea07fc38770","first_seen":"2025-10-04T05:11:03.650421Z","last_seen":"2025-10-04T22:06:20.901585Z","times_seen":3,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CC6fv1Rh.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/CC6fv1Rh.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/WmOt8kDh.js\r\nCookie: __ddg8_=ACeYYLIdSVmyOMzI; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=yrGmjZMiZyRvKwug; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-4eb\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1259,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1258)","md5":"9d0572c9a74518ff7384918546fc258a","sha1":"a4382d14dcdb2c139fa26f7012b26ac1fcb9c955","sha256":"481143b49f435c974ef85f6f99945fac1b6c6f98153c0cec1fe444e327a70344","sha512":"8c2eb8060b030c03c79d19bb6a5ef30088f30599098e08dbdb5b350008cde05692f04b43ee95b3b0729f7aa8a0b15cd9d6d52e5abdbb9119e78e8f2a7fbd8d52","ssdeep":"","tlshash":"102102afa135003f8e89353985486859cf464f1ab0ff8546b83e9d6aa3041c6dc7cf29","first_seen":"2025-10-04T05:11:03.262596Z","last_seen":"2025-10-04T22:06:20.902901Z","times_seen":3,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/js/pwa-load-event.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:26.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /js/pwa-load-event.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=bzfSX9mw9N9VCTPX; __ddg10_=1759615525; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Bu4l4MoYokoYlvb6; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg10_=1759615526; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-177\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":375,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"f463b05f25296c1e185cc82087291f6e","sha1":"d15dfa009eaeeaaf36af83b20ace25714adbc583","sha256":"3f5bcf295bac81715b4413d640843ee19600f6a17c96503038c6a4193c331865","sha512":"5ecd0baa189383e24afadcbe391266fac63cdcdcb7da68ab1371168fae81f05f0140b4dcd86bc4cc59f4ebb3f5949e94b302f05de00942886fe3060436ae03bc","ssdeep":"","tlshash":"64e02b7483fc55b808e182b75f47bb15116721a77068d990c1871906f8d148780a2fd2","first_seen":"2024-08-19T15:07:41.99372Z","last_seen":"2026-04-15T02:03:05.836861Z","times_seen":94,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CYqDhD_K.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/CYqDhD_K.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=e693VLwdJtJULGR9; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=eHzOhIgqHyXyBMw4; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-4b83\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 8159\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19331,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19330)","md5":"1bbfaa6ac14a0d4a4f6a2bdb50403740","sha1":"da1db6943edc34407d541bf0999bebae565a73bf","sha256":"75a2ab6b9337408f843fde1e6ecf53fab99814a48dc12f1744621095a45bc852","sha512":"585e1e94ae1be8697cb4217da30bc9a3c01726a9e4ff4664f8a888ea03fa639d8a97d603f95684fc8f37b006f0ca6b67619a74114c7924cfb1d8a1646781c6e2","ssdeep":"384:gbLmDw0GjHIVo6eR6o1Shl449OsLV5jbHQ6NhWWxZ9HqDXRoOkm4Zes:gPmDw0MHIVo64X1NdshJTQ63WUG4h","tlshash":"479295c832c7f5968793197681bf100bb23e6d85a40d8892d53ae0d87c7486c867bfed","first_seen":"2025-10-04T05:11:03.43668Z","last_seen":"2025-10-07T18:16:30.136146Z","times_seen":8,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/Y6kKl9j6FxxadV1TXc0hRHnkWoudiH6qp7YWaJka.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/Y6kKl9j6FxxadV1TXc0hRHnkWoudiH6qp7YWaJka.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:30 GMT\r\nContent-Type: image/webp\r\nContent-Length: 186696\r\nConnection: keep-alive\r\nlast-modified: Thu, 02 Oct 2025 10:09:12 GMT\r\nx-rgw-object-type: Normal\r\netag: \"5002efb4b63bf58b30f5bbcfdf519ae7\"\r\nx-amz-request-id: tx0000011c14d470c6bff62-0068de4f4c-173b8ac44-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":186696,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5002efb4b63bf58b30f5bbcfdf519ae7","sha1":"b100d08d81a72058f8e5785f0a66c07f3ca6bfd0","sha256":"d6219228df20726fac99f62d4319f1f202c89f91b7a093c311ab70b05f6e5cfc","sha512":"68fcd18bda0647de5fe07f89b45ffe94bd717f7bdd4c9cfe88c2887922671462ebd62f0d0641b1ccc753ba7eb097549824ea524e12151cae1592a2921f230357","ssdeep":"3072:WYnYNyhogbUeqSqrtnsNCxPt+U6RzCz2BVpaJWKFj9Q+UZCv3S09nozwV1Mu:D6yhqeqSMtsMttXxTAgZ9IMD","tlshash":"ef0423ead901c9bf0485ef95e4bccd2687904c797c7468a411cbf3d4e34a1e7da8c51a","first_seen":"2025-10-04T05:11:03.489763Z","last_seen":"2025-10-04T22:06:20.90455Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1891,"timings":{"blocked":891,"dns":831,"connect":28,"send":0,"wait":53,"receive":56,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/Hacksawgaming/7ff508ea230f4c88b025ef32692dbcd7.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/Hacksawgaming/7ff508ea230f4c88b025ef32692dbcd7.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 31746\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"237c00d350be36d52956b2870e1dd118\"\r\nlast-modified: Thu, 17 Aug 2023 09:36:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 185169DABEAFE771\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 2545\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=81jN3paxTErt7Y3rRLeze268H39bM1RdBl3QBgcTH015dVOkIXPjFlfl2GDHNT0mgtFdni6GQwyem9vTdCmm%2FZJh8b6Uhri1ZxjYzRLH\"}]}\r\nCF-RAY: 989762c25b5da008-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31746,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"237c00d350be36d52956b2870e1dd118","sha1":"6a30519470a594318fcfc9189851c37d7e3e1da9","sha256":"ff25df0fe6236a03a268ed69367ef6fc79c1e5283d81da2d26e44d3b869af692","sha512":"1018378232cb766b86b5c4aba4aa0557c47aaac0b2a3075184738e875d3faefdeae0ea278fd6ef5c58037c1bf2725c6a49d44dc52b5ad02cd1fa004db180cf36","ssdeep":"768:MMK5EPmyBS7iGhIv+gcA3XoBgIOzLTozciOFmnQ:MMEEPmyBSLhIvX5XlIiViOInQ","tlshash":"37e2f11334c5deb51492ce37a469334208cba9bf8cd82486bb5d85ca44fff51609e827","first_seen":"2023-12-13T17:48:16Z","last_seen":"2026-06-05T18:43:38.64275Z","times_seen":64,"resource_available":false,"data":null}},"time_used":1705,"timings":{"blocked":-1,"dns":1587,"connect":28,"send":0,"wait":54,"receive":2,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/BVJD_FzT.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/BVJD_FzT.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Q2PPdtRb2x4VAHua; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-200\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 5\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 301\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":512,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (511)","md5":"7238102902131e678624d38a52b93598","sha1":"0bbded74519658146adb846e34a258dc1d0dca03","sha256":"05cf9f3b464f937efb279653d4a70ece477c25c3db903e720cfb062a06308146","sha512":"3cc8cefecce474edd6549b99baa958ada12a1a7f5b5b5f360c02a362bbc63cc7b1427b65ee0f211281de7e4f3fc0c238e7ba192aade89ce8554cb4c0aff4179d","ssdeep":"","tlshash":"1ef09e8e70a3d2b0b777c789c937c642a47c1e52380de5d1d04a5a45324b481e73d72e","first_seen":"2025-10-04T05:11:03.419457Z","last_seen":"2025-10-07T18:16:30.061836Z","times_seen":8,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/hacksawgaming.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/hacksawgaming.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=M8nm3CNZoZy5ws8E; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-18a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":394,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1189a31541a9827c632f4655e907a63f","sha1":"2514bf0ef8985e5ae82d1bd7229d42ddb95749a2","sha256":"5707ca19c71b77ed32be06c64d228c4e3848be28b7cf66313841dce2a9f4509c","sha512":"b9bfa0c9a1d559bf7f5ae01cd3c2d7bf2b9ab8c6f50bd67429c72d3587e3777c40d8568b07cf62232de112a2c7128f808b6ac99d872bf32347c9202f3a84b619","ssdeep":"","tlshash":"34e068b563fea580a30ca7305275a136dd62b4faf8e913b19cc22b02329518f8e5c189","first_seen":"2024-05-07T05:57:01Z","last_seen":"2026-04-15T02:03:05.963922Z","times_seen":68,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/BVJD_FzT.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/BVJD_FzT.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=e693VLwdJtJULGR9; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NKj29hpDr8n3qdH0; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-200\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 301\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":512,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (511)","md5":"7238102902131e678624d38a52b93598","sha1":"0bbded74519658146adb846e34a258dc1d0dca03","sha256":"05cf9f3b464f937efb279653d4a70ece477c25c3db903e720cfb062a06308146","sha512":"3cc8cefecce474edd6549b99baa958ada12a1a7f5b5b5f360c02a362bbc63cc7b1427b65ee0f211281de7e4f3fc0c238e7ba192aade89ce8554cb4c0aff4179d","ssdeep":"","tlshash":"1ef09e8e70a3d2b0b777c789c937c642a47c1e52380de5d1d04a5a45324b481e73d72e","first_seen":"2025-10-04T05:11:03.419457Z","last_seen":"2025-10-07T18:16:30.061836Z","times_seen":8,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/highRollers","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"GET /games/casino/highRollers HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=r7KVuKe455ZY1yym; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg1_=coYcpdUk7kUNnqNFI0Cc; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 86\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 9b71a086-aabc-48c7-8550-f74c42e027f5\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1599,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bde1366d4c9b0adaa9800e52407138dc","sha1":"7e1660d1d6d34510f821df0125aa064f9ffb84a5","sha256":"e7785dff5839352ade32cf9f710befb741e978291fefa677feb7107a5282189f","sha512":"6aa9f32407aa96ed797d8778e08bee3bc685d6b94e1fe9629b662c48469f60fc0fab65e198604322d5b20582127de14774e3cf3f32ed6e857ca32e7343963d6b","ssdeep":"","tlshash":"573102e9b68c089dd5584ef04f1bbbda604d692b3249cd934ddbdc39c6406d7b440636","first_seen":"2025-10-04T22:06:20.83438Z","last_seen":"2025-10-04T22:06:20.83438Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/fdc4364a3eae2f06260e2f95ce9571ed/Belatra%20Games/a35ba034d66e0acfd1046961fa1b5242f219a347.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/fdc4364a3eae2f06260e2f95ce9571ed/Belatra%20Games/a35ba034d66e0acfd1046961fa1b5242f219a347.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 29434\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"3fa0e8d16b0bc9d147481719efa1f335\"\r\nlast-modified: Wed, 01 Mar 2023 08:18:51 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1852018A4DA24539\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 4293\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OtQvxbXopb%2BnLx9bXZ%2FKcMMxs1FjyYsa4L3vd1ye94TomCXVQrIOXpPPPPGYCTWSigdL1KAit0oQ%2Fw6X%2Bsd8T62yQJDdsrqL%2B5XpbAOz\"}]}\r\nCF-RAY: 9897941d7a5c796e-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":29434,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"3fa0e8d16b0bc9d147481719efa1f335","sha1":"7fdbc1a775f4acffa18aa472925f383d8555f564","sha256":"426bbeb8740cb4e18c8b4086e81e5c4fc8a02247906ae5b904d71406e1dd9ac3","sha512":"affb32d8f59ce551c284df2c1c8e0da154517660e6d7a7956b37a60a62d15c552d2cf63eb7f2b9e3cb9f7826ddc44c3f26cd74de23d291cae7bb1000d13d1687","ssdeep":"768:U+iUGZjbBE6RJxNHQeIavACk61YR9xGRKoQ2l:ULZjm6HvfYPxGbfl","tlshash":"5fd2f017bda4760a87da93aa2c0df91d66ad300032d8fd3796f603cea65088ef817750","first_seen":"2023-10-16T21:45:28Z","last_seen":"2026-07-30T09:53:28.000753Z","times_seen":81,"resource_available":false,"data":null}},"time_used":1724,"timings":{"blocked":1697,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/B8md4mkO.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/B8md4mkO.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/CkMSVCQx.js\r\nCookie: __ddg8_=okhxqzG8algqbAWO; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=RKTxnut7QcNxF0Ly; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-1c7\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":455,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (454)","md5":"13e52a860b7c9f0d3fa795af7b74e9ce","sha1":"7accab38b5a9d32cef5ccb294827c720dd57bc96","sha256":"c954534311f02c985beefb3b61e175ff796fc2c409a276767621ae913223fe2e","sha512":"47c79c65612ee02dd4eb85aa72519eb624de625c42d37bde7f3fe3833e9f4a07138a092facc0285e662e7027524712d1773ba386a387476425b3acec55059289","ssdeep":"","tlshash":"95f0a94fd89182b9d259ecf4c4349265167626bb93eaeba4c5ce0b34a300030d196bab","first_seen":"2025-10-04T05:11:03.678368Z","last_seen":"2025-10-04T22:06:20.911675Z","times_seen":3,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/100hp_gaming.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/100hp_gaming.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=qfT5yBkUtYWyZSKN; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-452\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1106,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cd70424dc36bb569cf66dce4c48ddf08","sha1":"5de353a0d76d6e3d096725cddb4d1a1cc7beedff","sha256":"d6a57b6d6c010fdf34e6d5f98611e05fd346f3c43e05ef25033b93d112e8d741","sha512":"3cf334bb6677631e68e2ec6d78e96ae1840285168cf9b3824f562a5d73ab7e43dd460c259417054af2cccf35b06566f495b6ed35e41de753710c0a95210a64ef","ssdeep":"","tlshash":"b411c3c9709c5690dd8203115e5ebcfb40a274fecab15b897a14273f2899aaf0cb5ec4","first_seen":"2024-12-10T17:19:34.308667Z","last_seen":"2026-04-15T02:03:05.915174Z","times_seen":64,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Home.puxSNRNF.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/Home.puxSNRNF.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=PI4A7Hme0mERb8lG; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=BNN3G18iTrNiOjl1; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-7b70\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 4\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 5352\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31600,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (31599)","md5":"f54b3d372981eeb830226b2cac6589f8","sha1":"5b32f6d7e1051ff1b13ef9ea8ef930004026f974","sha256":"702d9e1a9127a29bbf7a76f83f5239bb9bbef44c0f8382b79f13a38e5cd63681","sha512":"6d226b5103d1ac7895a65ec95731c3535e1f7850ce9e6c9e50c0fce4224413bd964e485e4c5ce1c686a466b23727d11d32dd712b9823a07289388c8fb030bed6","ssdeep":"384:7c9CVetr9K8r9TETMutXaYHsYCsk7JWGCIEw5+22xI:+CVl+9gT5sYCxl2xI","tlshash":"5de29931671c202db1bbe676b8e16a9d6118f507e72317b9d5d47438c8db682323aacc","first_seen":"2025-10-04T05:11:03.609866Z","last_seen":"2025-10-07T18:16:30.052681Z","times_seen":8,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/flags/?v=2\u0026config=true","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"35.175.162.132","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 15 Dec 2024 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:07:A5:B7:4A:00:EA:45:09:50:EF:4B:44:63:83:38:E2:97:F8:13","sha256":"6D:1D:1C:48:82:61:EB:EF:E4:D8:57:9A:EA:F6:ED:0A:07:BB:6C:17:71:6F:A3:F1:88:57:DC:E3:A4:E8:44:96"}}},"request":{"raw":"POST /flags/?v=2\u0026config=true HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwch64x.life/\r\nContent-Type: application/json\r\nContent-Length: 228\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Oct 2025 22:05:28 GMT\r\ncontent-type: application/json\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://gwch64x.life\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 2\r\ncontent-encoding: gzip\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":676,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"409e01eb65594cb1debfad71b9fe0e53","sha1":"6d178efcac45e76979d4c9931bb8bbff65c13941","sha256":"fe8ffdb9c603d771785885029bcb5361e0f26a768b56aa4ef3b8470f33327113","sha512":"6fbc850b5f62f3186f26bc81b644b91c6decdec368b5cd62b5c1339b08a3dc621ab39f80b06b9c2fc143533dcf99970468637e4df6c28686c1ebbd3478cc0cae","ssdeep":"","tlshash":"93017d2ef660093d88149345d5e26c194bff46233265bd6ce4ec849171eb4d996f3d03","first_seen":"2025-10-04T22:06:20.913387Z","last_seen":"2025-10-04T22:06:20.913387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/ext/cdp-customer//v1/analytics-js/ajs-destination.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /ext/cdp-customer//v1/analytics-js/ajs-destination.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=bzndxAFXAKAwOJIY; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iH71vJHYncPuEwkg; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\netag: W/70a1cd6d5c300a59c3b828b336627efe\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: public,max-age=300,immutable, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nservice-worker-allowed: off\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":9226,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9226), with no line terminators","md5":"ecdb24cdd6b5a3a4a7ba31895f79ca4b","sha1":"3284a1f3ba7aa68b324499a64bf32c8101701663","sha256":"ef949bb08ab368c25ce835e54a53b3eb842de7e868ff81ff99520ed16394637d","sha512":"e76cf7a6f407f484c5537258129ee7d29b765a14204c0cd4e1ee9ca3d9542ac01c5c0b0c557e704d8c69a1a12b29312b99ec0fd25608af07b3c79ea5a83d0492","ssdeep":"192:d61F3JpeOVXIhCBnMfJlUEpFX8nmuONy+2Yn:doF9TMsEzZuF+2Yn","tlshash":"5f1212ccf6c7f0055267bab5817b451ab33ebd1a244a4894f42bcdd5287c619a12bf38","first_seen":"2025-06-01T15:05:10.790294Z","last_seen":"2025-12-16T16:58:04.809767Z","times_seen":521,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CFzQcB0L.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/CFzQcB0L.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=e693VLwdJtJULGR9; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=piFdfkyddmPuQx29; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-39e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 331\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":926,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (925)","md5":"e03518ae3241e6dd395a063ba226f056","sha1":"ce8d73c397d5dc7ee93d3f441458d108201216c3","sha256":"5d716e4a24b41b70d9761f4ae2cc82b40a9e511e6cc6b8928bf37c1d61fc6ef6","sha512":"3de9e95ab046329789ed32f1404e4461988c1ce6bc41d1740d7c73cf1a87f4b802920111f593f14038981c80deb5d91190e6de0ba5f867f5b2a7d6b1062d6c60","ssdeep":"","tlshash":"3b11344e90351e9dd06ccfba806af38330609dbb2713e0597919d1a43eda4034d28f32","first_seen":"2025-10-04T05:11:03.43181Z","last_seen":"2025-10-07T18:16:30.089715Z","times_seen":8,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/collect?r=1751955","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"POST /collect?r=1751955 HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nRegion: RU\r\nContent-Length: 56160\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=sOCkjURUrTyKajvB; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg1_=A3a1urEVMVdO44jHktcp; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: cd45e0d2-a14c-4fbc-89c6-10d301919f41\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":30,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"11977a90f6bcc30dbb2c1096dfb33a52","sha1":"8cd52c68a113f8e4b3d8f141784dab663d3fd5cb","sha256":"8031180d4d982a471ca97ef5a04e8d013d003c5c19e80d0a5f45401c4463ec27","sha512":"ba256f5a6c4314e7f804a84cfd54ee37829b98698b373393d1e7061bee56e58df212dfb02cb039a78b644b8b0c4921cbec243e181aae5d89272a2835e48217ac","ssdeep":"","tlshash":"18800020ca802e2be30a02a2b20820800200028888c0280308082a0c020c80b80ea282","first_seen":"2023-04-06T20:47:37Z","last_seen":"2026-08-15T08:59:35.006636Z","times_seen":4061,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/locales/ru.png","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/locales/ru.png HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=YURsT9CwjiuslMow; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyOTU3MiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=N1zGmHjuxzcvP7y0; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 881\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: \"68df7ca2-371\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":881,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"5b388e83adf41a4fc264e5f31af4ba2c","sha1":"d1baf6207b71fee26681803f534cd6af7c5fa379","sha256":"2b9d3c1f709b46aecdc68c684a3095d535e67a9333a180b0b8a71499c6297356","sha512":"5a862da94fe837e8131d94e7629e99fafd4769a049a632f2d975c8af352858d488932118c6b4b4c45f80f06d64b02f7b1847e2d6438be358f6d71ac6411a08e9","ssdeep":"","tlshash":"5a1123a3855eca2ce4577b3c46eb92427c4e60261e562999f418cef92c560543046771","first_seen":"2025-08-09T06:39:58.929564Z","last_seen":"2026-06-06T23:27:45.150726Z","times_seen":113,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DRLB4-_R.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/DRLB4-_R.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=8Ts3zEx2DjVR8E68; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jQ716J4SggGiprZ3; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-201\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 276\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":513,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (512)","md5":"edbd750ef08a3e40bd3f93ef00424804","sha1":"2910560cc99b8e5fcf85488d82a39cdc3d45c09c","sha256":"19c614190f4a1ff133dd089486879e169ff387fc1dcddaf2177eb99e03b86f4f","sha512":"78fb844b4a23955443ad1a90c1ece096cf92e30a1b05a64a80d332774ad2063a4491e18a2a2afc1788c7762670f8638d1833868ff05f3775eeedec6acf4fd290","ssdeep":"","tlshash":"d5f0508b1caa18941de65f779027b1d2337a516e01518085feb1e6c4a10759ef32f430","first_seen":"2025-10-04T05:11:03.352335Z","last_seen":"2025-10-07T18:16:30.062849Z","times_seen":8,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/collect?r=1751955","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"OPTIONS /collect?r=1751955 HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwch64x.life/\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1lBw0j40OYY6O51W; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg1_=cxvNKLhebI64Qj8b4YFj; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: a461299d-d662-48aa-b855-24300c76d4dc\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/I75g9VYS.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/I75g9VYS.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=prFN4BjHdqEumvBz; __ddg10_=1759615530; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyOTU3MiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OLAz4n7p412A2VEQ; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-76f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1903,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1902)","md5":"aa233fa11a0ef189ec6514008db108cf","sha1":"7c173228093810daa355d0ab1133a87e3d0a31cf","sha256":"2c56278f0a3c9e90f6d268565d0055d1c6776ccc955721a039c07cc09d60678d","sha512":"ceb2abccc0ba38d33aa7a1fb106cca49d448a7422df4fe1f9e540c7c07a4905e900e280cd8790596c275a409a45ac0a213cd57da969b47a43058e4bea86f715f","ssdeep":"","tlshash":"5b41b98c78bd95b8c6be48c7b469116063c91fe8103e68cb72fd1c385b52804731fb14","first_seen":"2025-10-04T05:11:03.449653Z","last_seen":"2025-10-04T22:06:20.917557Z","times_seen":3,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":140,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/B0dn7nxz.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/B0dn7nxz.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/WmOt8kDh.js\r\nCookie: __ddg8_=ACeYYLIdSVmyOMzI; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Wf0YqjfiFPNaBjuh; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-8a7\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2215,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (2214)","md5":"89793b8dae34be90ae37ce3e8dc34e98","sha1":"a542fe10dec9701f6ec34845095643ff027e2ee7","sha256":"5cc17bb8cf937ae04ede57674422d39731160710c988659d51483500aad05de4","sha512":"5682a6b325daa93ac60a7814da1ce1a2f21bb43316a6c11d21bf2813d216e94325e0b7245105cd6f0d1178dd202c30e57d6f838022950905f84244dffa84204d","ssdeep":"","tlshash":"374130ea274e0914340e8342c881f5aaa73663a5b4f3d06c3ce29dc37201c43f6b0e65","first_seen":"2025-10-04T05:11:03.660171Z","last_seen":"2025-10-04T22:06:20.918737Z","times_seen":3,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DQ1ERKoC.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/DQ1ERKoC.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/B8md4mkO.js\r\nCookie: __ddg8_=vZnSJyHjLfGt1Pqf; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2mNb25BqqRtGoGav; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-3c41\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15425,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (15424)","md5":"b4f0ee70c084956ffa41ed79de20130f","sha1":"44f45d702bb69567d4cae815a10996c371430ad1","sha256":"37700f84f1bcda6e3849bad210531bcce6cba541e39d45631867cf05e35dbcf0","sha512":"c1db8d3a52a7a9f1c7fa79f3e3f8e7de3dbbc4728a66a078f7f59a6bac46f6893925e9f55ed71656ad65649bb51b9808cfb4672d62e7663688890d2debc6abbd","ssdeep":"384:M60fp3JEQbMc1YFlYI0SYae4RgaVG3QmdOI4v9GnTMUJN2SOZgmVjn:d0x36m6/YIte4RW4v94TMUJNl0gmVj","tlshash":"9d62f81ef48e9c7d52ba48c469d47941b53c2f9bd04048f2a4f6ce212247c6cf76eab9","first_seen":"2025-10-04T05:11:03.341848Z","last_seen":"2025-10-04T22:06:20.919739Z","times_seen":3,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/ls-cdn.amplitude/plugin-session-replay-browser-1.4.0-min.js.gz","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:26.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /ls-cdn.amplitude/plugin-session-replay-browser-1.4.0-min.js.gz HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=bzfSX9mw9N9VCTPX; __ddg10_=1759615525; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ZD147zRyhIzGWfmm; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg10_=1759615526; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 07 Jun 2024 21:58:38 GMT\r\netag: W/\"ead49d69bc7839b0b873b096d418e1ea\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nx-amz-version-id: a9eB74QCYmN.zM7i5ckvNX3RYMk8LisI\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: AMS58-P6\r\nx-amz-cf-id: GiCn6taK8Bhs50Ma_KsWE2puP9G1p8REqit2M1da8BuQ4dWaXCKlcg==\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":126923,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c19b1b5d91c8d683b1310562d9c4a225","sha1":"4d45dcac5c6a88e10052f4e356b2170c20413441","sha256":"bb5779145f1ebdcdee053876a4ed060174dda4656978972304c79ddd5f36dac4","sha512":"3a4e8d2e8f5d9a3b45c08ce99374c149a5b67d04d016edfe6259dfbbba948a049301c0cfa5f9bf334cb93b9b4a3558cffa725c166a943c90834c8d2237a1a21c","ssdeep":"1536:Ask/3qTBpVX0Ib6vhb2pJkuppl5METErM2jnpkDtoT1JaM18PIQunrr9gltn2BE/:IqBfX046vhb2pKMQt1Jawi697w","tlshash":"4ec329deb397b033539355a980bb0101b73a6a19300d4464f62ad9ea3c7d847a277fbd","first_seen":"2025-08-09T06:39:58.991299Z","last_seen":"2026-03-24T13:49:06.781634Z","times_seen":48,"resource_available":true,"data":null}},"time_used":840,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":840,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/ns.html?id=GTM-KN757LMM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /ns.html?id=GTM-KN757LMM HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: *\r\ndate: Sat, 04 Oct 2025 22:05:28 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 92\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":268,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"4aab75dcb6382c39dae33c9a1b45e608","sha1":"a8e4758330308a44ca74242cb17591e6c6599483","sha256":"d818a014761cd9516d1b3e296946e960d91f4c917bf42a808e67323a8b062da8","sha512":"0fe058db29f10d9f41db7b0cc9cbe8e403b36b07fa7a99b9699ce7cf60748d248d8a79b1a56f4bb006d507059fbe8ab73ce71b9a44ee095a6da8dea54da625ab","ssdeep":"","tlshash":"2fd09b4fd0013404d92052b05cc2776414516544f5e58d536582f4355d44755cd53158","first_seen":"2023-04-05T07:30:22Z","last_seen":"2026-08-15T03:05:47.965498Z","times_seen":5099,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/lastBets","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"OPTIONS /games/casino/lastBets HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwch64x.life/\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=aEsRVMLjEitng4rK; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg1_=D6oiQVzsaO52YO7RoSfk; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: ba891d8f-2178-45fb-bcd6-b9c3da8487d5\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/463211d8a53d7dab42157e08e3ba3435.png/3jF43bxkEgXwrlhbMo3TgKzQF9EqR4QIOK1QvLdd.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/463211d8a53d7dab42157e08e3ba3435.png/3jF43bxkEgXwrlhbMo3TgKzQF9EqR4QIOK1QvLdd.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 566390\r\nConnection: keep-alive\r\nlast-modified: Fri, 02 Aug 2024 09:48:31 GMT\r\nx-rgw-object-type: Normal\r\netag: \"43a5036cbeb9805da9a59b954b6abbe9\"\r\nx-amz-request-id: tx00000ee560cd36d73b63e-006867c47e-162d5ff9f-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":566390,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"43a5036cbeb9805da9a59b954b6abbe9","sha1":"ac6da28e7472176a2e19d4e65b3018fdd5363d2d","sha256":"bd6e839f0658e4b87100f059bf0003cc1ce75859a62df4987c4ddb5c38131b02","sha512":"0a22948891b7b0c9710ff3246da5bb567906c572571bb67726926d97401fa811e1c8853c1dc7ec58a21b7f925d94af6716796f07accf15b528d00b4339310549","ssdeep":"12288:H6avv/X+Kv69uQ+uuS03mU9YTiQ84sdfQh+azkWVYA+1H:Vvv/X+Kv69xub3nKvsCNzko+Z","tlshash":"c3c423930fa6906ff216d21df0650c685efb54212e5f05dd2a1faef905b039ad390637","first_seen":"2025-08-09T06:39:59.116547Z","last_seen":"2026-03-01T21:47:53.319472Z","times_seen":21,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":444,"dns":0,"connect":0,"send":0,"wait":28,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DJ_iQnf_.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/DJ_iQnf_.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/B8md4mkO.js\r\nCookie: __ddg8_=vZnSJyHjLfGt1Pqf; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ZqGoZLSelB7e1PRJ; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-d79\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3449,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (3448)","md5":"60746f400a9a3d3f10edefe5e53dea72","sha1":"c47361cd97fb2b8c4b15ad08488c1d7a8cf9d12a","sha256":"6794e50df61bcf4fbecd3f2683c7d332e918b156735afd1dfd7a51284b133441","sha512":"7823406b483508f36f23d081881fdec7a2ac5f68d34a4aafb2a9c20769c3cb84220e4c22589a0d9e7c5f4b7176d906281313022b0c21ab2bda116794a0da910d","ssdeep":"","tlshash":"ee61a60fe80550a9063174e8a218a5987b7c1fede2941841a3b5dff70b97c69b238a96","first_seen":"2025-10-04T05:11:03.546852Z","last_seen":"2025-10-04T22:06:20.923864Z","times_seen":3,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/gamzix.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/gamzix.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=HGo1pDi8NyKwDJAX; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-7b3\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1971,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e82c459ffd4d8e01f72c723b935b7293","sha1":"c04f51efa3918cc9a14629e688cdc862a1be7675","sha256":"2ca28a038719a9cefd62e55589551c3eb405d828b2893dee80936c3bfa128579","sha512":"84b9d2ae06b5b76806e1c303b0eb5a147176ca81fa7eb5205694de0cd875d754e4fac3e12cdfdee5a9e558cb5d04c7de91981990df58830995cd2e5fa196b6f0","ssdeep":"","tlshash":"3e41567ca3ade1e0d20c97b583ad1179b27a38eb0f21c29d07bb2d95fa5521d40ad8c4","first_seen":"2024-05-07T05:57:01Z","last_seen":"2026-04-15T02:03:05.847166Z","times_seen":68,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/triplecherry.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/triplecherry.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ZRi2JqxvIlstHPfr; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-9cc2\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40130,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d7b72497a709d371c0b42510ecfac382","sha1":"70f19990d8e54831e33edaceacc0d521d3e4d366","sha256":"cc32bf72860f4cb7444d1cadff17a1fd31b1a09952c0a716bbff9d528a692227","sha512":"5eb32a62d1ead4b37c466f43f75d300e9083f532c25b9d8e2a514205901c491debbd94997d71553f7596734678dde7fb78d1475411d66d45de856c274d6b6a43","ssdeep":"768:hIx0XMOOxWinoJiBWSof+k4pTOLyE3U+tIXf63mpkg:hIx08JBnoJxDwTapU+SSOkg","tlshash":"6203e1b9de215ccdaa40e100927baf905e7a0ecb7ce497c8844d610fb5c9a9cca4edd5","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.940066Z","times_seen":76,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":167,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/api/v2/banners/main","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"OPTIONS /api/v2/banners/main HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwch64x.life/\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fFeWQP5lIdxBkryH; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg1_=GlLJZoPo5ZdzVYPgKT9C; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 010d2840-4d06-4c3a-a618-5035ec7a4b9b\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":109,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/B1SePAqd.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/B1SePAqd.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=prFN4BjHdqEumvBz; __ddg10_=1759615530; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyOTU3MiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=0YdXvAuaSsdWN4GB; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-818\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2072,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2071)","md5":"1015aa595125ddc18a70822668479225","sha1":"e18bf50051d177f6bd3bac5066f2e951b77a6926","sha256":"2bf76c6fe77999a7bfb0672e24c2a13760c70618c8a7499a7acc10094a9f8fb9","sha512":"f74346e590b1199ab03e5ccbe0d972b8e86d4eebc4c52437e908774f901772bf13ba5283fdbc20c45ed550a030ca497833647319dbb0f72b939337b9ef04000a","ssdeep":"","tlshash":"8b41651cb87d593d417e58c7b5241168639c0ff89039b9dbb5f94c391b91c14b2aaf10","first_seen":"2025-10-04T05:11:03.585675Z","last_seen":"2025-10-04T22:06:20.926735Z","times_seen":3,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/vip-club.DN3Cckyw.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/vip-club.DN3Cckyw.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=ZqGoZLSelB7e1PRJ; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=l7hkYJSaiM5KUGbK; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-1764\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5988,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5987)","md5":"5e6e2cbaeb744bd7bf2b3f592ea88be1","sha1":"67c297351dd7121a8ee1057e64b8a6dcc3bef8a5","sha256":"93fc71eccd52453f21ed2ee584ff9c3dcc5af54f6fb1740fff653af6f0889a97","sha512":"2cbfdc7508bbed05e392922d2122e4ebb970dcbd20827964d73f27d8e856192042f2b9bad37cbf0c316fd34e5c5e027edfe14fb7359f0d10e2412e140ada86ce","ssdeep":"96:v5BUiB0IHukAQIhcCIObPQMJSTMisu5wM1JMqGSC:RL0jxQYcCIyPfu5wkJMqGSC","tlshash":"6ac1f193bd18706870bff8a2a4e24f153260f61bc50362a5b991d5b5ccce4b23721f7a","first_seen":"2025-10-04T05:11:03.354153Z","last_seen":"2025-10-04T22:06:20.927706Z","times_seen":3,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Cn9yliqE.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/Cn9yliqE.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=xoLtMD3mLm1ELGGK; __ddg10_=1759615532; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=52yIYEYLaaxXtwo4; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg10_=1759615533; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-6d137\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 5\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 113112\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":446775,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"19d5b85492f4d8505bb0d3df174e9e2e","sha1":"84b6548697aa030be332309225e873884d9f3dba","sha256":"79ce7f24d8f2fe12521d0d2ab3e1f77deec6ed8d84313c24f6b0e471532776a6","sha512":"0be04f2ec94f2b25a681d6dd3e61486c30aabe678dd82d01a56bd4a6d9fa45faae911209c277356941b283d09658258d66ebd35497c800c064db73ea06177e1c","ssdeep":"1536:kzGEyMiW9myjPH+UTrFuRSmicJ9HZBynmI0+iAFBynmI0+iA5zAGg1JxBynmI0+3:ktHPH+HFQttb40vzx8","tlshash":"6794b9e1f3a8a1ece017e7fcce26a471351a35fb3b91c5c44294ae749e221ac9d5dc81","first_seen":"2025-10-04T05:11:03.35039Z","last_seen":"2025-10-07T18:16:30.139568Z","times_seen":8,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/l/v/poll?action=poll","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:40.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"POST /l/v/poll?action=poll HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwch64x.life/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 217\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:40 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 2\r\nConnection: keep-alive\r\nX-Webim-Version: 10.7.130\r\nAccess-Control-Allow-Origin: *\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-15T10:42:45.734631Z","times_seen":760983,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/eurostile-regular.i2b9H2-b.woff","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/eurostile-regular.i2b9H2-b.woff HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=YpBDTEdo6yPaouz4; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=JAajjHQg2P58MpeB; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: font/woff\r\ncontent-length: 97680\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: \"68df7ca1-17d90\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 4\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97680,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 97680, version 1.0","md5":"535b1e86232aafcca96b143529c8226d","sha1":"9408a42efc92ea6972f4d0f50560c22ca84d8a08","sha256":"c5a7a7d506426bb073f4f866f0ea9f3c57c8e856444e5403494d9db263e85671","sha512":"b54f1a43cd21271056f02d0626c573357b3ad962969d24a7c03914513d6644155108d5fb0608d47c734e650e1141de70cb9cc13e1ee1f08830c33ecd7dbb8abf","ssdeep":"1536:mndVS5OB0M0Lfxv9JKgzmzwv25WCnEx2pW594UIi/m3KYdu+WLSkNQ:mv3BbuX0gswcIb4UIi/m3K4u+B1","tlshash":"95a312039a03b7246d764afa2eaf4b39f5d4ef988d0d63c147e1a410194d52f2f6126f","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-04-25T06:32:47.453739Z","times_seen":81,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/footer/lvlx/logo.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/footer/lvlx/logo.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=3cSQAEPVUoQw1bC3; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=MjLHjAMfC6x2kiFv; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-4a0\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1184,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"743489fa6132c79707cf67ab559d050c","sha1":"b1f7c69289033703f975043997715530210cc716","sha256":"bf3f8d2962026699f0229ca007322db9edd9ed366fe6770ef79c46276aeba886","sha512":"578e579d2a9806e1a6331644d4980185e0867dac3dd19136132e0fef3ef0b5ee8893889fbf922f7c8a40f089b4c19d4a0649567673dac7bd85c0203f21ffde6b","ssdeep":"","tlshash":"ed21078031995381640b47d4fe2b20345d57a0f7efcdf1fc16e14aa3a4d125658e4ed0","first_seen":"2025-08-09T06:39:59.124894Z","last_seen":"2026-04-15T02:03:05.831565Z","times_seen":46,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/js/button.js","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /js/button.js HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:29 GMT\r\nContent-Type: application/x-javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Mon, 29 Sep 2025 21:14:19 GMT\r\nExpires: Sat, 04 Oct 2025 23:05:29 GMT\r\nCache-Control: max-age=3600\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":899155,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1210)","md5":"587e13c24d17141fecff62e86a00ffc4","sha1":"b67c345ddb508d91f6aeb774a086db22cef92530","sha256":"b18d676e74a1991942986057293a33b529fe3b5bad23ba68c06667d67a1d225a","sha512":"8c61210e82be9f7e0581456056d8592a8c4f15cd5a361e5c37f57308d367406b80487b99a2c26a4530eb777f8ba43f7a5ea584d7bfdbaf710527871be5ececec","ssdeep":"24576:/o36wXnnOqCNTKi983ht1x2vRfXjXjryWsz9tQ:/o36wXnnOqCNTKe83ht1xYdTjryWshtQ","tlshash":"e2155c897644353a82dba2bf702b170976379552a444d46cf878e8d4bfb4d09823bfbc","first_seen":"2025-09-20T02:53:52.592022Z","last_seen":"2026-01-19T12:14:51.147852Z","times_seen":173,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DJcl_WQ1.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/DJcl_WQ1.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C145BBQ-.js\r\nCookie: __ddg8_=uTjpvYtGqW5QTUIp; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=QFqBhInxEqLtgVh1; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-7f9\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2041,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2040)","md5":"3bda576d37392e259fe30e77ff55fbc4","sha1":"a4274c75e0355947112b6108130079c0722ffb9d","sha256":"20451b5d76ce39f1c30c60469bbe628b6f23dbfdd5d77e95807be21647500717","sha512":"6c38ff2376a929370791e4ecf018e4af5221c18e53c3febd055741285540ca9db3e4b80641305409659bb13c7fba3168465ccecc7f648d3f432c32850e8c9865","ssdeep":"","tlshash":"9941858ef1545d3063d7e5f190196100875d9f2b75bd85d0b925b7c3022297efdcb690","first_seen":"2025-10-04T05:11:03.635582Z","last_seen":"2025-10-04T22:06:20.93038Z","times_seen":3,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/4v6vyIur.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/4v6vyIur.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/CkMSVCQx.js\r\nCookie: __ddg8_=jyTtDnazfXCVdlqw; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7fW6f4jk6U5hq5yD; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-215a2\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 30232\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":136610,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (43811)","md5":"10c92c717f8762cb181545e7d2c6b331","sha1":"712d5130ad1deb5bae8e8e479a21d4908274dd34","sha256":"dfc421c8fbb78ff109f24399be0a334cbf47b3b407cf2bc5c31f50e2da4cd9a0","sha512":"34893e23627e8ef59a86fd8bec5618574feca8590438c4edd0f6f59efb2cfd25ed0b3bc334c2d4afe53e9e96f45ca65bb651f5ac475760cbcb269ac3a6c6eb23","ssdeep":"1536:QsrUHXu9+2FYnFjqN1q46HAXJF707AMvrHCRAxpdh5CVaJwBNI5tdJked5qK:QxHXuw2FYW2T5Sa1RdD","tlshash":"bed35f4b4e0c0e7a056217b12fada7b362acc07471dbc3e557bf82182375475aea279c","first_seen":"2025-10-04T05:11:03.528287Z","last_seen":"2025-10-07T18:16:30.112258Z","times_seen":7,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CjIjlGq-.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/CjIjlGq-.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=e693VLwdJtJULGR9; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=3cSQAEPVUoQw1bC3; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-9ce4\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 13011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40164,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"8536f2f542c30c3b37aa68fa9d57f5cb","sha1":"4679e0eb2b374266ccf64bfc73ac98dad5143a1d","sha256":"84a0b743a7ef37e6cd2a2db660b4b5899c3fecce9d1f28502709614fc9d191fa","sha512":"126dd430ac683507fae1c2a1e11c5ff94a9015441798342ca77791fe29709b30c33f8b30ff1b10b1f08b51fac27d016fed4b2f8e724afb82dd8b57c2fbc7fbfd","ssdeep":"768:kC43aMGeQtDCPB/HyzE0qct7yxP2C7dSlSxkPut06BcftOashQWEhQEq/iiB8faZ:760xiywcV64IX","tlshash":"e303f8c8b2a0506583e2a1a390750203f33999153409855cbb2ceefbad7eeda7177f75","first_seen":"2025-08-19T01:32:32.322521Z","last_seen":"2026-04-26T08:04:42.226428Z","times_seen":67,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/highRollers","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"OPTIONS /games/casino/highRollers HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwch64x.life/\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=kMSj1TakSRJ1zcT5; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg1_=OQobNnNdRG5QoFhL41mb; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 744e036b-9614-44e4-b390-80ff8217a29e\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Bej8Ac-i.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/Bej8Ac-i.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/CkMSVCQx.js\r\nCookie: __ddg8_=qvzM6DYC166LlIlJ; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ACeYYLIdSVmyOMzI; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-11c0\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4544,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (4543)","md5":"0e972302236ef422b3f71e0a563a7b92","sha1":"8601e6e3d189efd82236352799cd94f0a9730ac9","sha256":"d2032f355ad4236b6f0e6aed6c7bf168b6e9b0e3aa32bec4ece9976feb210179","sha512":"855d9aaa3827a656f749d04efadf065cc7ab65bc92a4fa43ae88ac099e043c725d955f272c4afea7e058abd7ab5c90fc4d581941999c5c45480044d3e96f3235","ssdeep":"96:bj8tlTYiN7xRLAHhaJcZ8zrMaMTTJ7FhGe7ytq6:bj8tlTYM7LQ9Z8/MaMTTZFhr7Gq6","tlshash":"34917519b0845cf899b187cedc4108b269db9ebf8410e97173fa2f3027d5ca4e206b29","first_seen":"2025-10-04T05:11:03.545188Z","last_seen":"2025-10-04T22:06:20.933009Z","times_seen":3,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CFzQcB0L.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/CFzQcB0L.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=7wm8ovmUK7Jj8Uv1; __ddg10_=1759615532; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=bMZwlZhJDGo3CdZG; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg10_=1759615533; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-39e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 6\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 331\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":926,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (925)","md5":"e03518ae3241e6dd395a063ba226f056","sha1":"ce8d73c397d5dc7ee93d3f441458d108201216c3","sha256":"5d716e4a24b41b70d9761f4ae2cc82b40a9e511e6cc6b8928bf37c1d61fc6ef6","sha512":"3de9e95ab046329789ed32f1404e4461988c1ce6bc41d1740d7c73cf1a87f4b802920111f593f14038981c80deb5d91190e6de0ba5f867f5b2a7d6b1062d6c60","ssdeep":"","tlshash":"3b11344e90351e9dd06ccfba806af38330609dbb2713e0597919d1a43eda4034d28f32","first_seen":"2025-10-04T05:11:03.43181Z","last_seen":"2025-10-07T18:16:30.089715Z","times_seen":8,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/BgUJLoS-.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/BgUJLoS-.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=e693VLwdJtJULGR9; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OFdHRvIv169WDeCK; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-adf\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 1004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2783,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2716)","md5":"3d2c02d74f4c0768d16385c23713a8c0","sha1":"1e2f8b6a1650552df13bd17f73f349846209ee3c","sha256":"8512dcb0a79df73db990833caf165aab1438ff109b77ddd32e991b8b0a69adff","sha512":"7ac5308be49ee81fff510e3d24e13ac74a8a6d69821206891d8e8a82542370041a96fb5012228d6288aa1c3892b3b4d6ee558d608c84817a858b19611b3b74ef","ssdeep":"","tlshash":"4f51421e7eda54310b2a2830e09714a3a009dad11c1dc721b9204d9d79b1d96cdb3fef","first_seen":"2025-10-04T05:11:03.439288Z","last_seen":"2025-10-07T18:16:30.141403Z","times_seen":8,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/2d90c08b7b6927b4a04aa1b58f6bc336/Novomatic%20Premium/95df7532c85c65f27e4ff0b522ecb36b3740590e.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/2d90c08b7b6927b4a04aa1b58f6bc336/Novomatic%20Premium/95df7532c85c65f27e4ff0b522ecb36b3740590e.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 41702\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"59be945d200d66bc2d2ec71a10aa2aad\"\r\nlast-modified: Fri, 05 Sep 2025 06:38:23 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 186805BDCD5E4CF4\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 6141\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fcrjhvn0yJm0nqCOZdKCjkbIaIYiqltm33UcIWoJcj%2FGyudrcyziiIsJK4ourlqJkFDG%2BIIZaed7ryfX076U5HNNHxTUfMdGfjdy%2Fea9\"}]}\r\nCF-RAY: 9897f6f50a2ba000-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41702,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"59be945d200d66bc2d2ec71a10aa2aad","sha1":"834a268521aecd4c838dc3719d2d3b44051703d8","sha256":"3b5e082e66b97a1359156b70b5f96ba1e6bebe1682a31a621e16372104b173a5","sha512":"b12233a17f515bafca26939bf74ee47f7c58c929c6bbf69508a788e4b7dbf20c6e0f7dc81025aa8e00cbe046007d6f9a508739fe376cddcf2fbde85edcd56ac9","ssdeep":"768:Y6YD/cKfkQeDPthIJIVcCEL1u90NFBvjTkkceI82/f:tKVeBFVtoq0Nfvjknf","tlshash":"1d13f1c595ce969b823e8386c09e65cd7fda2a73390b4777a350326c2e10db4c217be1","first_seen":"2025-09-09T11:33:29.16404Z","last_seen":"2026-02-12T21:37:49.397006Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1744,"timings":{"blocked":1716,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DzVxT-JT.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/DzVxT-JT.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=7wm8ovmUK7Jj8Uv1; __ddg10_=1759615532; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Jb2lfTdyk0j5JPSK; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg10_=1759615533; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-8e6b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 6\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 10021\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":36459,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26664)","md5":"56b248e4197f0aa4ff0bf9e1a5b45b46","sha1":"fd106eaaf3c02a1a9fd4885d893bd1970db2897e","sha256":"636935d6e62f931bc653ce0b948508d6b13dd6967c2b278ebc0cf8e81016773b","sha512":"cba0682b45dea2fdd1828dbc2d87bc1caa950b6f1a3837281662cf896660c76c8c5560bd9f60302bf997691a60509971c61b5cdf8d7d307ee589da79f2fd3133","ssdeep":"768:4qTY+itM+orCjJJy1ee3JP6r1KCcKlyUW7YC6u64tH/9:jbiJou3CP6YhcW","tlshash":"a6f21a487be0bc34c29a30d7353e09057b726641586f6600e009c6b97fa968a71bef7e","first_seen":"2025-10-04T05:11:03.531109Z","last_seen":"2025-10-07T18:16:30.074352Z","times_seen":8,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/tp/header-tp-en.png","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/tp/header-tp-en.png HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=3cSQAEPVUoQw1bC3; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=G6kyCvECFgCgFUcx; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 4100\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: \"68df7ca2-1004\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4100,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 80, 8-bit colormap, non-interlaced","md5":"9984919a7ae4558c9b93a3e95e4d9e4d","sha1":"e511b73c533f649ce720ec8ea97c3a18ec58a29d","sha256":"77bf06a496064b8cfb7fd716c2abf4afaedee4c17e6c28d446a2ee6ab515cb16","sha512":"1c4ef457055489ecdc7832d0894adf6409492b59131d96f0b17ff3d1a799f22fbf23147054d64ac8cc55244d45b0be99f7691792ffad58897932818138ca75e8","ssdeep":"96:oEg9OzjOTFQiWpgoREKWT1uXWKqkD2EAvBJGagMf9CXq+V:3jOFQiSnRZM1+WKqCl6Gag+cXNV","tlshash":"44815ded0f971dddb730ad58526c00f1a52c2082b9b8fcf534a8f1ba7d2b22815d519b","first_seen":"2023-05-21T11:43:22Z","last_seen":"2025-10-14T04:24:50.196148Z","times_seen":37,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/notfound.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/notfound.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/Home.puxSNRNF.css\r\nCookie: __ddg8_=3cSQAEPVUoQw1bC3; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=soUoY24M73Z4MFHj; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-4f4\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1268,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d407ca6493dfd5a34e7f79fa4504c402","sha1":"dd9fb47686492da351804b5826accf2524ab7dfb","sha256":"a0ac446a4d2979bfa2f6f73339f7087e6f7ff83435b3dd7f7b363c049b2c3bfd","sha512":"473308352777d8acb3d5d35275465ad7739729a4844908986ccd5f4e1041c0cf931cc328bf2c3f23035b218da4173afb835eeddfaf114304f5af1aaf3011c07e","ssdeep":"","tlshash":"2321b7f9932020d4dc075bf8dfa638d98007b9fa5e5002cba67471153308ccee401b5a","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-04-15T02:03:05.909912Z","times_seen":76,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/images/cursor.png","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /images/cursor.png HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:29 GMT\r\nContent-Type: image/png\r\nContent-Length: 591\r\nLast-Modified: Mon, 29 Sep 2025 21:14:19 GMT\r\nConnection: keep-alive\r\nETag: \"68daf6ab-24f\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":591,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 17 x 27, 8-bit/color RGBA, non-interlaced","md5":"4fa7bdcd138f8aee5178f0d4f926595b","sha1":"6d3a5103766e97395bebbd2ffe811b2e7ad3c7c0","sha256":"a1fb1b429d644ad011e6bd98701d1951138d3f973bda19ce3411e1c1d65ef35e","sha512":"81d75aeb19459f946924b46919bc1c4f447dfc0a0b56915ea19edfca282ea936c4b58a9d417459fa1b41982380200b3a894a8fda09faeab075556defcec883a3","ssdeep":"","tlshash":"fbf047cd4d715339af5e04d190f714a8fc45228a2460a51c4e0fd01a3d85055fe0d34f","first_seen":"2023-05-01T22:32:10Z","last_seen":"2026-08-02T00:07:57.702418Z","times_seen":2296,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/zcbSYatoRoBfsYXcnObHPNieRNCaivNCXJpkCiC6.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/zcbSYatoRoBfsYXcnObHPNieRNCaivNCXJpkCiC6.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/webp\r\nContent-Length: 63334\r\nConnection: keep-alive\r\nlast-modified: Mon, 01 Sep 2025 09:36:54 GMT\r\nx-rgw-object-type: Normal\r\netag: \"76be7e0031c010909f74233bbb6e4641\"\r\nx-amz-request-id: tx00000441d6f69c0867d75-0068b56b26-1731a253f-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":63334,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1380x736, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"76be7e0031c010909f74233bbb6e4641","sha1":"4257f488e4a8c7a1967c9844e737bfac3cb0273d","sha256":"fea8c360a15fc0111abdd65f0ed658f53bf59230922485989d91af01e11ddd80","sha512":"43a1632247a81c881e677b2a480c55036e3ba89f9fe2c6d0761a4c6d23991b76f4856109f68c29f9bf6720b8318909662a2367d816a4e5f875b7f9380fe3eb5f","ssdeep":"1536:vtSPa83q+BmQIzkDe+so/1HOmyZ1cq17dASbvBR+vyOSeCXlIsacY:F2tZqxo/Wc+WgvBRMSKF","tlshash":"605301c41d2d545331b3ea4bb868f3bf819889789187867c94ac4d43b2da0375a6bd3b","first_seen":"2025-09-09T11:33:28.972212Z","last_seen":"2025-12-29T21:49:40.383528Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1175,"timings":{"blocked":1147,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/Z5E5Sw3IjhEvUyTcnoFSDSJC7zRQMkM12xQAUJpl.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/Z5E5Sw3IjhEvUyTcnoFSDSJC7zRQMkM12xQAUJpl.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/webp\r\nContent-Length: 15552\r\nConnection: keep-alive\r\nlast-modified: Mon, 16 Jun 2025 16:57:29 GMT\r\nx-rgw-object-type: Normal\r\netag: \"11c305f0e9d521e138732cf29d002e0e\"\r\nx-amz-request-id: tx00000fed533a343116f4a-006867c79a-162bc1ae0-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15552,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 690x368, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"11c305f0e9d521e138732cf29d002e0e","sha1":"6fe2b708b0278d79d90d48cd56672c414c2f70fd","sha256":"5790103e502257194aac973accd2e010f3a2e80cf90b76bb478ff1b32daa8fe3","sha512":"70e8d9621f942c0f98bea6b4096279b9df9d1dffb249ccf96628a376cb113b19a499f7b661b403358347ca4c9d70aaf560265ecb84ef728fda7114892877386f","ssdeep":"384:gdESzwZpCosiOhC4TMDjCW7Ez2tIeeMxNYoxEpU:Uqgi34TufYzzeeMTEpU","tlshash":"0662d0a23076ea859e61fcee9d9c417cf68972014b07ef8114b39d556064210e7c6fbb","first_seen":"2025-09-09T11:33:29.028121Z","last_seen":"2026-01-21T08:18:57.100574Z","times_seen":24,"resource_available":false,"data":null}},"time_used":1181,"timings":{"blocked":1154,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/df61abd27adc941e19df1accbe88208ba21e4f70.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/PragmaticPlay/df61abd27adc941e19df1accbe88208ba21e4f70.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 22623\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"c350dfa4e887c264c9fb0d1635a1b2e3\"\r\nlast-modified: Mon, 06 Jan 2025 19:15:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18514DFCED2F6E65\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 728\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8P1gSf2hGtZxCfCm4fVLy2lWtMkIvimbFEiy7OU%2FI7Hrxlu1WULdwAG1XkMFJsUvCeyamk2Civn%2FyvLPWjcFI3TTUv4pxhE84OTei2ip\"}]}\r\nCF-RAY: 98975b817fb20b75-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 200, 8-bit colormap, non-interlaced","md5":"c350dfa4e887c264c9fb0d1635a1b2e3","sha1":"7d7bfa744ccbe4a2c0106e800f3de9bd3909503a","sha256":"fd55f07b1fdb3125900271bb5fd6862299d2edb3239e10a70a75eb7017937a3d","sha512":"4602d35c64a078421501425229f2b7b91d333ed2433b45bd13de564453bf43006359b388fa9c32cae25f686f704e0ee4eae4fe69576e27c7e1aa23a8db26145c","ssdeep":"384:IsNJ0kNGPTq1f3C6cBN7LF/6/mFYorwgY3VjeBkXTORZjWD/2M6gq/h:H0EKO3CBPLx9TkeBCKRZCDOTh","tlshash":"a9a2e02a5383f57a70da3125e9c8686084a7b410d1e96f0d2c9e101b2ee678be7dd737","first_seen":"2025-02-06T08:02:39.093262Z","last_seen":"2026-02-25T19:06:54.122407Z","times_seen":39,"resource_available":false,"data":null}},"time_used":1705,"timings":{"blocked":-1,"dns":1585,"connect":29,"send":0,"wait":55,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DXFcmPY7.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/DXFcmPY7.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C72coOWc.js\r\nCookie: __ddg8_=QTv0NOnNCsLmc82E; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=dqL9YtblvZoxUo5Q; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-23dc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 3839\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":9180,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9179)","md5":"f35775ff648ec6716f2a297601310e96","sha1":"7305e85cbb919d8b85f3a5930e3f296b5e6fa785","sha256":"4511ce05d79359267133ee9e7e89fe59be13436a70679dacdf294e07de1bdc6d","sha512":"c81450c578ff1a8ef035a1d56429dd637b3533bde838720faf99a48ee0d1805b8f24567ecb757ca921606067907d517d04226b17383e91d3a37c4fce563a34f5","ssdeep":"192:XqsxSEFu6ZufGq++k5q2IkZQ+tOWwYpsTctY0ipgNE7oVKRpnKFEN:XhZ8fK+kQ2IkDLwYpfYZplOKRpnv","tlshash":"c212e9e473ac72aa59630dd12475481de434e6243b26f4d1f2ba38bab497c44b273f2d","first_seen":"2025-10-04T05:11:03.241006Z","last_seen":"2025-10-07T18:16:30.134044Z","times_seen":8,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/fdc4364a3eae2f06260e2f95ce9571ed/Belatra%20Games/714ca4aa6a5a444b979c52b8d37cad53.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/fdc4364a3eae2f06260e2f95ce9571ed/Belatra%20Games/714ca4aa6a5a444b979c52b8d37cad53.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 25741\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"220486d966c1a1a36ab56e0f5395ea94\"\r\nlast-modified: Thu, 31 Aug 2023 06:06:21 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1850E1CA865BC6D6\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 1685\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dq6E%2FAVZy4Q6zpjITwpJ9ImKnjlztx8uXNcEFFiYET93Okw%2BRLmrGkbSXPzz0WIBlkym0icvDdG6S2vMt24ME0o2A%2ByUiX2JExMt8San\"}]}\r\nCF-RAY: 9896ca78f90c8e3f-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25741,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"220486d966c1a1a36ab56e0f5395ea94","sha1":"780101293ba21e0ac7193d0e6e979ca3fa082912","sha256":"f0e372822148f12ed8f014504853b32bef5ae14d758e19af0103543f675a2c66","sha512":"cb113582e16d1910dab55221983c03e5b581bf984338c62930098dd3578a039957903e8c60505253e87eb771c8f55f90a2e802717a624d965f5d4ad73bc4b5b6","ssdeep":"768:YC/Ew+9U5+Mhl+Q8lQZNhZnCC+f5eGyOmDup:LEw+9U5+Mhl+2ZNhZnckGyOmDup","tlshash":"6dc2f176da92f8abd4c887f40090b8427e92af38201ee5dd9a3c75f127b53f12498d13","first_seen":"2024-05-07T05:57:00Z","last_seen":"2026-03-01T21:47:53.490083Z","times_seen":44,"resource_available":false,"data":null}},"time_used":1725,"timings":{"blocked":1698,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/2d90c08b7b6927b4a04aa1b58f6bc336/Novomatic/0effe53c32380e21ed933f076b4fec76f47ea14c.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/2d90c08b7b6927b4a04aa1b58f6bc336/Novomatic/0effe53c32380e21ed933f076b4fec76f47ea14c.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 32989\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"6b2f4b43406cac32f2938fa7e975f145\"\r\nlast-modified: Wed, 01 Oct 2025 10:11:42 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 186AA18F3032D393\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 256\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Byaymw9oQ62fq%2BJQSEK1waOvKERfYMQvp6tSEQJ637odxuqJGK0RSE%2FCIWp4ewtKZjB9tcFLV9Pg9qKMcW1p%2BT7YRtLccvO5LIWGAphs\"}]}\r\nCF-RAY: 9896b42dda3a4e96-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32989,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"6b2f4b43406cac32f2938fa7e975f145","sha1":"fa78d921d23b9bf112c5c1e89573b6721c742f3b","sha256":"01c31272001e498d6d590e2e6832d492001bbad24cb21e5e23f20b0caf5d1e76","sha512":"476eb1c2c573b8e5d2f501d181a958f86d8a8e3688db801dac9b3c2f41d0b6218b46f31c28e872fe22be930d81ab1ad2b3006ae75162a37cf21b98af3a15e6b6","ssdeep":"768:QayWX4zQXv9Zpdwe8eauS9nB1yFWR9ahs2aYuro4tT:QaX8Qtdwe8PZbBR9YXaYOT","tlshash":"92e2e12c63e638521adc8ff5e16de0e5af7a6e3b512531daf0815b41228105e9d7f870","first_seen":"2025-10-04T05:11:03.28039Z","last_seen":"2025-10-04T22:06:20.945515Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1741,"timings":{"blocked":1712,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/collect?r=3809255","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"POST /collect?r=3809255 HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nRegion: RU\r\nContent-Length: 56160\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=U8yICetxspTNm3kQ; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg1_=4sL8Hjug2FdoLdI5O1hg; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 366ca69c-b788-4592-854a-82f4c55dac77\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":30,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"11977a90f6bcc30dbb2c1096dfb33a52","sha1":"8cd52c68a113f8e4b3d8f141784dab663d3fd5cb","sha256":"8031180d4d982a471ca97ef5a04e8d013d003c5c19e80d0a5f45401c4463ec27","sha512":"ba256f5a6c4314e7f804a84cfd54ee37829b98698b373393d1e7061bee56e58df212dfb02cb039a78b644b8b0c4921cbec243e181aae5d89272a2835e48217ac","ssdeep":"","tlshash":"18800020ca802e2be30a02a2b20820800200028888c0280308082a0c020c80b80ea282","first_seen":"2023-04-06T20:47:37Z","last_seen":"2026-08-15T08:59:35.006636Z","times_seen":4061,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/index.DghLH_8T.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/index.DghLH_8T.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=9l4jof0J2NaQ6Zdg; __ddg10_=1759615530; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iuKmQqrMO2csLypB; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-12db\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4827,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4826)","md5":"e9c8484d14e49d421006fd266ad05a0f","sha1":"06c1d001a3c3ae4ef75cf857057b38192ca7c305","sha256":"d9777077b2d5fdca33bdbe68e95c61f950520737f3600db01e59d24c5884e5de","sha512":"b1cbf2e703c1a52f3b47e50bff600ad94d6c748aff818416ce6efcf1c4435ecd83206ac99dadec41bc30897ca18ee28df17cacf336b0e4da222a95647ba1b2df","ssdeep":"48:VKZlTORiawcVQfud6pKlBpSc4SGq6d3w+u61G1aWezQbtYtLwrysijNtZlCaOLK5:Ey5Od3v3Z8m0nYsq7N","tlshash":"e6a17531330c702878b7c583e9606d85214bbaafd563876ad66031399ddba933f721db","first_seen":"2025-08-09T06:39:59.091465Z","last_seen":"2026-03-01T21:47:53.351507Z","times_seen":34,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/no_limit_city.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/no_limit_city.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Lov3JHLsAym1Jeoa; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-bf0\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3056,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9ff4deb92ced493fea0625b4d8f88d81","sha1":"5e693d82d776b8fb15ceb7afaa908579491479d7","sha256":"e343b9027a32c87e4aced50c8bb605bb6e9768ccaa141db8a8414db1e1b32e28","sha512":"59123620f973543ac8a08919e9f325f18c723e61c9e7a9d1a27675aa938267d43165ac48e7edb7a4705928d95b5f091dcd90d2732a28c6eb89e41469fc66e465","ssdeep":"","tlshash":"b1515677db4279178b92011f53eff9102f22964fedc2012b48c8a2d3398ec569c543ab","first_seen":"2023-07-23T18:22:18Z","last_seen":"2026-01-21T08:18:57.060083Z","times_seen":37,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/playson_premium.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/playson_premium.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=nvsZU5yHqdR7f9is; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-4b6\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5c779d57bcec0fe4d42e108b4f34c15f","sha1":"40e4c6d78d1a92f13deee6ff8291df1a84c2de61","sha256":"6903bea0047248cef50e6c09312dcf1df8f26ef511c10fd4f22bb7c9c7580494","sha512":"51ec89c6412be1df2d784b1368a1797067e248946c29eb545d9914bc3884552ee0a7d9bb1834f4ec7ba1ccafde38ffce918d2dbc04a49d7aff1a52dcb357422b","ssdeep":"","tlshash":"392151ebf39da7d0ed048320c82dd97840a678be7f58a39d43d0ecb2e41a85e1c48c80","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.866029Z","times_seen":70,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":105,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CYqDhD_K.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/CYqDhD_K.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=8Ts3zEx2DjVR8E68; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=4yoH7KuDpG9F1jCc; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-4b83\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 8159\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":19331,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19330)","md5":"1bbfaa6ac14a0d4a4f6a2bdb50403740","sha1":"da1db6943edc34407d541bf0999bebae565a73bf","sha256":"75a2ab6b9337408f843fde1e6ecf53fab99814a48dc12f1744621095a45bc852","sha512":"585e1e94ae1be8697cb4217da30bc9a3c01726a9e4ff4664f8a888ea03fa639d8a97d603f95684fc8f37b006f0ca6b67619a74114c7924cfb1d8a1646781c6e2","ssdeep":"384:gbLmDw0GjHIVo6eR6o1Shl449OsLV5jbHQ6NhWWxZ9HqDXRoOkm4Zes:gPmDw0MHIVo64X1NdshJTQ63WUG4h","tlshash":"479295c832c7f5968793197681bf100bb23e6d85a40d8892d53ae0d87c7486c867bfed","first_seen":"2025-10-04T05:11:03.43668Z","last_seen":"2025-10-07T18:16:30.136146Z","times_seen":8,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DzVxT-JT.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/DzVxT-JT.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=8Ts3zEx2DjVR8E68; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=DXXp1CLk4NuY19tn; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-8e6b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 10021\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":36459,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26664)","md5":"56b248e4197f0aa4ff0bf9e1a5b45b46","sha1":"fd106eaaf3c02a1a9fd4885d893bd1970db2897e","sha256":"636935d6e62f931bc653ce0b948508d6b13dd6967c2b278ebc0cf8e81016773b","sha512":"cba0682b45dea2fdd1828dbc2d87bc1caa950b6f1a3837281662cf896660c76c8c5560bd9f60302bf997691a60509971c61b5cdf8d7d307ee589da79f2fd3133","ssdeep":"768:4qTY+itM+orCjJJy1ee3JP6r1KCcKlyUW7YC6u64tH/9:jbiJou3CP6YhcW","tlshash":"a6f21a487be0bc34c29a30d7353e09057b726641586f6600e009c6b97fa968a71bef7e","first_seen":"2025-10-04T05:11:03.531109Z","last_seen":"2025-10-07T18:16:30.074352Z","times_seen":8,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/ext/cdp-customer//v1/analytics-js/646.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /ext/cdp-customer//v1/analytics-js/646.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=iH71vJHYncPuEwkg; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=aZUCOPjfUatbB1OU; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\netag: W/57a98141b93ad7f0310e6134ab19ac9e\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: public,max-age=300,immutable, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nservice-worker-allowed: off\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":26551,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (26551), with no line terminators","md5":"c83e6df6ffa3af6337495fadc058adf3","sha1":"1bb413dd66d4e85907de4414bb98fd17be6ae482","sha256":"d128bb0eda8faaee8ff9b04a261ad0e835dfe1631768aa39c1a54952261d5787","sha512":"7ed7358de7f6d30a0c529a75c1fe9b1e6e79b34f8753538873c0c517dd28c52e423abeb772c0be518d344f2f513f3ff1c7b5b511aa99645b7596f4edb7771749","ssdeep":"768:i4V72U1y21F6WiEyKS3K/70fjjtRBlWBqnNyV18u8/zo8NyB5CJ:i41yGviEy+0vtnNyV18u8/zMO","tlshash":"bbc2f94a316a393d83d351e7bd7a3006633b7555b849c041b2ade8872f294cf6273f9a","first_seen":"2025-09-25T08:21:12.740421Z","last_seen":"2025-11-07T14:36:24.349236Z","times_seen":171,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/eurostile-black.CuyT6JKl.woff","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/eurostile-black.CuyT6JKl.woff HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=3cSQAEPVUoQw1bC3; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=aiHdoEx9yTsgMCWE; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\ncontent-type: font/woff\r\ncontent-length: 95720\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: \"68df7ca1-175e8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":95720,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 95720, version 1.0","md5":"ca7fd9425338588d941bfb331792ecce","sha1":"e4a8a3b0425a3323f2c3e8b4059a1429da8297ce","sha256":"cbeec4e4387480fcc4cf1bb7f9bd5736f9b6425ac6d7450770e3bb565eb4675f","sha512":"8e1fc6495d11f4c2eafaa8fd62112e0517c2f5046b9777b8fa0f771c481f72a0f73db15a7f6797ed1523d050886f9fd7635adbaac124fee24cdaa8b86e935eec","ssdeep":"1536:jj302uG3KgcImTEjOwWoiGRHIRRBCUo7zO102Y0OBGYQACp2ZPC3ZZ6p8rR:/EkKTImyWoiGRYRBVoR2Y9BCp2BUZ6pE","tlshash":"d99312eec0fcce88fd9d02ce105d6a35ae49a0fcb2c3598b82f154d892dd17e895506d","first_seen":"2024-12-10T17:19:34.260995Z","last_seen":"2026-04-25T06:32:47.440262Z","times_seen":55,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":98,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/5XokaAXXiNK1QR9zvTGT2iFyGhPzLhCTLgX30gis.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/5XokaAXXiNK1QR9zvTGT2iFyGhPzLhCTLgX30gis.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/webp\r\nContent-Length: 60832\r\nConnection: keep-alive\r\nlast-modified: Fri, 18 Apr 2025 08:17:39 GMT\r\nx-rgw-object-type: Normal\r\netag: \"22ebd198a416fa08ce852f109296cfe6\"\r\nx-amz-request-id: tx00000650e25ca736f3bef-00687f66c6-1687b1f97-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60832,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1380x736, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"22ebd198a416fa08ce852f109296cfe6","sha1":"bc10ea628a978f7a6762de4bf772744ad26cf6f9","sha256":"3a99d9e5b50d3a53a5450467b97bc8d128680363f447f0391469e4f8e09148b5","sha512":"8dfaf4f58bd7efb6e4f0339ca5e859282459b0f46ea207991e06f502c5b04a17a427886b84fb804cd660c5bf37992df9a1e6e2ad07cd64aa9322ba2d9ceb476d","ssdeep":"1536:N9sq27O+mfj2XMp0PpsusA24IGykJndju+jitZsmPv3:iyj2M2QElLjutln3","tlshash":"00530167e5a9570adfc0ebfa8b8d9b4f90f707a0409729aa21f4301182dec41e49d1f6","first_seen":"2025-09-09T11:33:29.108521Z","last_seen":"2026-03-01T21:47:53.298701Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1198,"timings":{"blocked":1169,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CLbd04ce.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/CLbd04ce.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/WmOt8kDh.js\r\nCookie: __ddg8_=ACeYYLIdSVmyOMzI; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=kdLPJqjKgSnlbp1R; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-8c7\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2247,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (2246)","md5":"d101cdb72b544b9decbee1aa42f440c4","sha1":"a9a6a583b81a15a6c3c4d2ba85b236a48d3bc329","sha256":"aa791d76bdbffec99264e16e5f2f9b713c76c4b702cf53e4abd143f92afe6906","sha512":"b03ecaa8429376a8b9851b8184429bd925bb5eb4493cae3c0868a1379e001388864cf0a39636f97b392691a86a295638bff3a1cecea6688de916e5a183c76996","ssdeep":"","tlshash":"4b41cf0e9586d164eafb0051a51c0681625caa9ee474085df2fce7effb1c87d7b0da70","first_seen":"2025-10-04T05:11:03.363227Z","last_seen":"2025-10-04T22:06:20.951658Z","times_seen":3,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/batch/","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"35.175.162.132","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:39.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 15 Dec 2024 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:07:A5:B7:4A:00:EA:45:09:50:EF:4B:44:63:83:38:E2:97:F8:13","sha256":"6D:1D:1C:48:82:61:EB:EF:E4:D8:57:9A:EA:F6:ED:0A:07:BB:6C:17:71:6F:A3:F1:88:57:DC:E3:A4:E8:44:96"}}},"request":{"raw":"OPTIONS /batch/ HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://gwch64x.life/\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Oct 2025 22:05:39 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://gwch64x.life\r\naccess-control-allow-credentials: true\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: content-type\r\nx-envoy-upstream-service-time: 1\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_ipx/f_webp,avif\u0026densities_1,2,3/img/home/home-crash.webp","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_ipx/f_webp,avif\u0026densities_1,2,3/img/home/home-crash.webp HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=axWMToMevviSY80o; __ddg10_=1759615530; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyOTU3MiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Wc7l16WshNU5ow6G; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\ncontent-type: image/webp\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests;, default-src 'none'\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\ncache-control: max-age=60, public, s-maxage=60\r\netag: \"7ea2-+itVziP3hlrfHUfVxnxcSrZpG0Q\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32418,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 868x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"06f712de8e75eae4f670f2658fac621c","sha1":"fa2b55ce23f7865adf1d47d5c67c5c4ab6691b44","sha256":"76009ad40ea26433da828503a60f5c0e7ed2b7fc6a085a70215f0374dba9d156","sha512":"013c795c4f03c96d227102824098ba859fe402064af6afef32e845c884723e8c1317757b23b529cb7f3e10e9d23d1d3edeb2952ee9c50e51cfb8539a40c2b63f","ssdeep":"768:5DwbhgUFshGzA3pVJ2jmthIZ+DrjptocteBsts189DhrIfN:5b/gzAZd9tDesialIF","tlshash":"d4e2f112b32e1e05a410bdd84638e776eb96f29ef41f5be725b8db4012764dc988f0d2","first_seen":"2025-08-09T06:39:58.844444Z","last_seen":"2026-03-01T21:47:53.337551Z","times_seen":34,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/3a2c9dc212edfde626137fae5ddb22b3.png/xSTsWv4nQxIJxiBtgHoPEzV25xnMK05RgqVvEWJW.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/3a2c9dc212edfde626137fae5ddb22b3.png/xSTsWv4nQxIJxiBtgHoPEzV25xnMK05RgqVvEWJW.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 446202\r\nConnection: keep-alive\r\nlast-modified: Fri, 08 Aug 2025 11:28:05 GMT\r\nx-rgw-object-type: Normal\r\netag: \"e52cb297e75cfb0b064b0231cc4ee04d\"\r\nx-amz-request-id: tx00000ed8654f0664f64cb-006895df46-16cd69584-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":446202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"e52cb297e75cfb0b064b0231cc4ee04d","sha1":"86a1e85f85a12a96e38808e2af1f02d9346fdb17","sha256":"c9d99f019ef67c7a402ff0f7526bba4dd462f741c39ad85e49f08d75e8e32b6c","sha512":"c0b988dea8552e2681e10deebdbee60e559920b37072ea61642ebb8cf5e120b7db73b31b2f250a5fc8c80f425de6002a33a66b751055bf51e8e2657be1f9e274","ssdeep":"6144:srq5uir6J6/Roxf3ZtY8if8xXFDmjHGVH1CFLyZjg1rGb1BrSfsLWGIY3kUz6G:sr1zJTxvZScXlw+csb1ORY06","tlshash":"9094238d2506ecc807c8fc11a567df8ca6c1f58be1f198b61c65b2f94bbadf14ad4a04","first_seen":"2025-08-12T21:10:07.685554Z","last_seen":"2026-01-21T08:18:57.047268Z","times_seen":28,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":410,"dns":0,"connect":0,"send":0,"wait":27,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/13892c6beb22da0ad6b5e8799d41c75b.png/lKWsaNTjFKCYsfM66PKuEuIGdjqOJUwOhKdtHpyl.jpg","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/13892c6beb22da0ad6b5e8799d41c75b.png/lKWsaNTjFKCYsfM66PKuEuIGdjqOJUwOhKdtHpyl.jpg HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 338518\r\nConnection: keep-alive\r\nlast-modified: Thu, 30 Jan 2025 11:14:47 GMT\r\nx-rgw-object-type: Normal\r\netag: \"4918b6afcf7183be64c4edf328076bcb\"\r\nx-amz-request-id: tx000006e668fcb653c6ccf-006867c463-1639b45fb-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":338518,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, software=Adobe Photoshop CC 2019 (Windows)], progressive, precision 8, 610x400, components 3","md5":"4918b6afcf7183be64c4edf328076bcb","sha1":"799a8f4abb76b7d28f208090d9203e17e2f27e36","sha256":"e9eddd1ae4e3ccaf93f70b69744dde149e4a2275c7aaffa4f854390e490cad97","sha512":"b05a896e7fa2fc6ac0bc79fb42fd18ae77cfe8b4f91b268b78fd0cb8cc76db6fc42e470c73fa46eef89a889626a2ccbd88fd7094189e09bec945b48abd12e319","ssdeep":"6144:45QorbeIDU2zy9YtJClf64pSLldGAYcvO0PMN6s8+1WDdG1nYh3m:4xrqIDrkfRNAfOUMd1WU1nYh2","tlshash":"28742373cb806636eec40f0478dae8c44d161ad652dca04cbd1fe849ebd9a79b21534e","first_seen":"2025-08-09T06:39:58.884513Z","last_seen":"2025-10-23T21:23:43.056084Z","times_seen":12,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":441,"dns":0,"connect":0,"send":0,"wait":28,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/e5613466029bb58a5fa3a495c6b88683.png/y4ZVMMTXEkjOuluA3dtJMs804Xr0Yst0KHxdbaS5.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/e5613466029bb58a5fa3a495c6b88683.png/y4ZVMMTXEkjOuluA3dtJMs804Xr0Yst0KHxdbaS5.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 529511\r\nConnection: keep-alive\r\nlast-modified: Fri, 29 Aug 2025 08:46:15 GMT\r\nx-rgw-object-type: Normal\r\netag: \"13c1f821dc02d66947a8187d31250521\"\r\nx-amz-request-id: tx00000006d8365a9e52ded-0068b168d8-1724f0e13-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":529511,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"13c1f821dc02d66947a8187d31250521","sha1":"ed7373759cf7c703eab2688e645954a88240bf49","sha256":"7982c14d707434957082a71c213ef0f6c5ca711f19369120c850166fc996e8df","sha512":"082e4a7e8fde70e0b76fcfc95692d5249385f1a437823e1020c96d5980e08f1ccd15ddacfa863ef85d4b66cf36f83368115813c58de372120965175aad15770a","ssdeep":"12288:sStlnGaawikMIzI7/zQIrORozWDCrQdanifIW+ucX5mJWSgL4t:FjGaaHCIvLrORozWspnifUuOGWSgL4t","tlshash":"e4b42306acd7572a62cc692e21dd4c0f09ace134525aaf0fa299e9f2cff157e12c3754","first_seen":"2025-10-04T05:11:03.684142Z","last_seen":"2025-10-23T21:23:43.96408Z","times_seen":6,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":456,"dns":0,"connect":0,"send":0,"wait":27,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/d8f118e9bfd01ace4f417a8adf3c72845788a658.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/PragmaticPlay/d8f118e9bfd01ace4f417a8adf3c72845788a658.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 21161\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"4e6f71a1dc12f9edd4678a6908361bda\"\r\nlast-modified: Mon, 06 Jan 2025 19:16:33 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18502797A60490B8\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 1658\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gJd1lMKbsvV32dotoqPoRQz4p%2FXc%2FESCQUZAb3cl8BKhlHwljSZhAxxL38T1gtJjqiIkuW%2FdUNhO8Cmv%2B%2B9%2FqGNRps%2FgLSsJHc7EGa50\"}]}\r\nCF-RAY: 989789865cf166db-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21161,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"4e6f71a1dc12f9edd4678a6908361bda","sha1":"b13e37da6fa29810d5ba2b19480453497ccc3756","sha256":"b57968514a26ecf5aa665e277f0ea32bb174afa50b69f91ba75f9e6c19a64de7","sha512":"4d849dd4a7e17de9d4d86fd17b5d845c07625d0ddb02f2ec837bbae49d5b96cf26e8c724d0a16fa96d45705648f3508542d414f09049c2cd80107586bcf2d2c5","ssdeep":"384:3JDdAl4YanhoJhAn+SLERbPQ1i8o4M+SOVID:3JDel4Yan+jtmihP+36","tlshash":"1692e1778c5ef8b56186312b437ceb404eb8939ebd054e236e17f29e6f159a3035250e","first_seen":"2025-03-21T05:40:08.950924Z","last_seen":"2026-06-26T01:47:52.323076Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1748,"timings":{"blocked":1720,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/cryptojs-aes.min.js?v=1","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /cryptojs-aes.min.js?v=1 HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=8Ts3zEx2DjVR8E68; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=0zRNqkOTLHia5u2h; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca2-359a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 4790\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":13722,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (629)","md5":"cd93b7f0987a614bc17698503bcb6af9","sha1":"68a66448326499ff34c75bf31e2769b278584e0c","sha256":"8d4fae1a37a5b5338c889d0897b50024194b4d3ae94940e7e42c1c1423a1183e","sha512":"e3b87dfe10c0e3f3d801a85ae9c654a74eac22c2a93a757568a0d2b13755c36aeb5f9337e94a21db4ef2d1f0f1cfb98fccbbb0151d5cdf8d967730df96bfde98","ssdeep":"192:9BIGDmDm90mP9z8Ui015lN1I5rI2Tru6hMJFmHV+mdpwIfyAaYfKnNVYkUUFJZm3:9yiB0ez8UiIX1SrTegsEHJuI+y8Z7AX","tlshash":"625297c936edb94263963028587f6017b86b28b6945c4824f29cd4ddff9899dc03ae3c","first_seen":"2024-11-30T18:08:34.076577Z","last_seen":"2026-06-26T20:23:29.818692Z","times_seen":1206,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/api/v3/welcome-pack/get-welcome-packs-guest","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"OPTIONS /api/v3/welcome-pack/get-welcome-packs-guest HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwch64x.life/\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=IylievkWRQwyFgb6; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg1_=GWVszJhaSgof7uTiQvR1; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: edb33e15-c935-4d1e-a47a-289e3ddc4144\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DzVxT-JT.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/DzVxT-JT.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=e693VLwdJtJULGR9; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=4zrjzZlvUKXZq1tm; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-8e6b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 10021\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":36459,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26664)","md5":"56b248e4197f0aa4ff0bf9e1a5b45b46","sha1":"fd106eaaf3c02a1a9fd4885d893bd1970db2897e","sha256":"636935d6e62f931bc653ce0b948508d6b13dd6967c2b278ebc0cf8e81016773b","sha512":"cba0682b45dea2fdd1828dbc2d87bc1caa950b6f1a3837281662cf896660c76c8c5560bd9f60302bf997691a60509971c61b5cdf8d7d307ee589da79f2fd3133","ssdeep":"768:4qTY+itM+orCjJJy1ee3JP6r1KCcKlyUW7YC6u64tH/9:jbiJou3CP6YhcW","tlshash":"a6f21a487be0bc34c29a30d7353e09057b726641586f6600e009c6b97fa968a71bef7e","first_seen":"2025-10-04T05:11:03.531109Z","last_seen":"2025-10-07T18:16:30.074352Z","times_seen":8,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/TaNftZks.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:27.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/TaNftZks.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C72coOWc.js\r\nCookie: __ddg8_=s3buOdmNGNHFp2Cg; __ddg10_=1759615527; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1q7iSJYpdzhIaup2; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:27 GMT\n__ddg10_=1759615527; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:27 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-9018\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36888,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (36844)","md5":"b3207d6a426c185b2a7c5287a16b3b54","sha1":"ef943c31a4709da3cb206379185f4a9298596fc1","sha256":"e5961afbf67e5c460e4a76fbab2ea44d2c538589da9053ecf5ddcb80bd9f16ad","sha512":"6459689b5cdc1c610512d2f364f44c886d41e88ea43170f86b80d8c876b31bb8af2ffa391565414c9827d27b907f8c96fbb043ba29325403b4f764686892c940","ssdeep":"768:ouDRAWjwR2qMm7t58Om4uSyMUWLucH4YrjjiYHNzlchq15lDVtkIfrH5J1Le6VjT:o7eDmpiSyMUWLucH4YrTlcWRf7HuK0de","tlshash":"00f2d709e4199c3ed9b78dd878541402722d2fdfd0804d72a2fc9e155bbbd78229eb6c","first_seen":"2025-10-04T05:11:03.548498Z","last_seen":"2025-10-07T18:16:30.09333Z","times_seen":8,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CkMSVCQx.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/CkMSVCQx.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=DXXp1CLk4NuY19tn; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=C6M5EIBsSjGBSUMU; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-75efc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 168066\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":483068,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (47660)","md5":"79068909446126a70dccef2e4c2a06cf","sha1":"3f1f59ca79626ad920c3f2ce34109d2d06ca1b7f","sha256":"8214d22013513fb9a76d56a5723c9ecbaf725ebb9beff448232c77e30a459faf","sha512":"437b07be547ebde1a4dac1fdcfbdc3521519d219b964b3e1cb959bbf76c98f5165fc8af5ed54a44cb436d8b827326c03020820e0dd888540088fc28351669c12","ssdeep":"6144:EW2i6XYOhfa7HN9OCjhpr9SPXiBfmECS4Teq2YvnqX1SnI7mbvnQGcRjsXKAiH2i:ZXkhS7DO+hprP9mxS4VTqlSnKG6wXKF","tlshash":"6ea45ad97196b02213f619e4807b0106f3392a54384ec4e8f16d9eeb3d7690a92b7f7d","first_seen":"2025-10-04T05:11:03.286196Z","last_seen":"2025-10-07T18:16:30.070847Z","times_seen":8,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":23,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/b-vBzq2i.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/b-vBzq2i.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C72coOWc.js\r\nCookie: __ddg8_=QTv0NOnNCsLmc82E; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=r4YGqfnOFcsjC7AC; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-d13\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 1270\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3347,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3346)","md5":"36c0c6b8ef144d7bf7caa7079c3a416a","sha1":"8dd20af034fdbf41e59ffbc3aa163434f7ee366a","sha256":"3680ac7d48ce5a8a0c9fde6d13412fb8edae11c7de9830872df097f8aedc5abf","sha512":"927260065160a49bff0120fc290821cc672903ea0d9135823628640c37dbd0e28581b0266cf1d189d1eb33fe85ae593c49035d3bb673b31857c5a49d2903913f","ssdeep":"","tlshash":"856141fc1635a57226eb17bb43620ca242764845f049b27010da8f0d592dc984bf3ffa","first_seen":"2025-10-04T05:11:03.465869Z","last_seen":"2025-10-07T18:16:30.055353Z","times_seen":8,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/images/gx_site_logo.png?1701674734622167","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /images/gx_site_logo.png?1701674734622167 HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 4133\r\nConnection: keep-alive\r\nLast-Modified: Mon, 29 Sep 2025 21:14:19 GMT\r\nX-Cache: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4133,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced","md5":"399c0fb7ea391e714efb49d85fedd512","sha1":"2f75c2f16d1700486b582d84473972389f174d9c","sha256":"81e421fdbd5c1e1845915192ef0c15be691c374ff66aa8386d30f52ef3a8a824","sha512":"bb58440279a4d1214c3fc8800ab5d6c2ed8e9dd4016e26c493a6c8c290d2b5a03474478e70ab242968a446fe46f691adb04b451de7636c5c3af0c7fb1da0d8e1","ssdeep":"96:TjjcoQqosJxFjeAcv1TGJirAUmGT+mPxOh:TjjkyH+AUbmw+mPc","tlshash":"e9815cfa3d3233d384649a020a7d5400543b6ccfba85955e85e3c0db3d44e884ace296","first_seen":"2025-10-04T05:11:03.245529Z","last_seen":"2025-10-07T05:14:26.726458Z","times_seen":6,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DUaaTVgP.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/DUaaTVgP.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C72coOWc.js\r\nCookie: __ddg8_=QTv0NOnNCsLmc82E; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=pBrrMf6ZHpTCpcob; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-687\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 929\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1671,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1670)","md5":"b7ffa89853e25cdd374f1b1b43dd9270","sha1":"0b818c53ddb47cfdfb2744f8885a52580139ce3d","sha256":"606f1e6bf95874e266928a81253820b7d84c7b825e49df2383961e32897c6b6f","sha512":"31973f15fc25c05ac174b2eeadf1f7a2a110fd9ef2df8c4a2dca421e8e3d51da6a7eaf1f8192f0f0e97e899d82d2eb17e80a74fe3a323f80c7b7ea632e3b1370","ssdeep":"","tlshash":"703144c9f29ce4b7d0e7d7e88472802076d875fb3fe8dbd5824099715623096764ead0","first_seen":"2025-10-04T05:11:03.445851Z","last_seen":"2025-10-07T18:16:30.060895Z","times_seen":8,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CIV1DmJm.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/CIV1DmJm.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=e693VLwdJtJULGR9; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Zo2GbrV5sKAUMKKH; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-36a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 438\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":874,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (873)","md5":"3bcb3cb731faa08f8e975f22576abf93","sha1":"05344c9790022a0d796fe682cfba3af36a0347db","sha256":"ee27ce8fd95c8b0501fb72850528edd31a3d0195819a462635ca117c897cc60f","sha512":"73d6c16f46985d8259360bab931cb67e77640c8585a6ef8df1950979b4eae173ae318c351dbd07548a5d6d4b28d596f35c41db8840566f386f52f61fd70fce23","ssdeep":"","tlshash":"0c118cc070a4a431c3b849c801d5abb2b55d96843de782d4e45e1d33213f89cc579b19","first_seen":"2025-10-04T05:11:03.497488Z","last_seen":"2025-10-07T18:16:30.088926Z","times_seen":8,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/vip/mainPage/bg.webp","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/vip/mainPage/bg.webp HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/Home.puxSNRNF.css\r\nCookie: __ddg8_=3cSQAEPVUoQw1bC3; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=CMTHqIYvuOFoigHT; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45556\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: \"68df7ca2-b1f4\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45556,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e39774d542e18edf4cfa36d04cac809a","sha1":"1861275d48a7be8ed8e03c06490ee02bde83b69a","sha256":"82c6d25a57ecbc14b8e3a4fff7bb25120f682501ed9b6e82a914e83952ab2429","sha512":"5055dc2080e22142fd134adcd8fd334b4c6b5b36e859afbbf49b43a680fec8abb711339dda4c1d44386f0e2b8aefb1ebe7a05df04f030117acbc9836e8c3c771","ssdeep":"768:YwAhH15qKerR/sXK+oRPl955n7wKiV3tfidYKNt6jb5mUbFuQgyTvmWAZwO4vRf:HALUcXEnrxwKkfihD63zMyKWAeO4v1","tlshash":"a313e0c05342605ebf48a97e7fdf0096443a6dc417ba80f299638b157fb3934ba71a78","first_seen":"2025-08-09T06:39:58.842762Z","last_seen":"2026-04-06T22:48:49.739794Z","times_seen":58,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":93,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/24af37f89f48429eb57f315f3c5c80d7.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/PragmaticPlay/24af37f89f48429eb57f315f3c5c80d7.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 24882\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"36124c66609bcbfc658cab49ccbc43dc\"\r\nlast-modified: Mon, 06 Jan 2025 19:17:20 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18507262C754C38B\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 2628\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wqZPakGT8naWynAgwt9Z5AeAQvEoPRTHGiUwzHtexLvVt%2Bm%2Bx5Xc9mWjNSA4bOL3j6E1qqevAMblI4w240ABrnHJW%2Bcac9wlkrNDJ%2FGx\"}]}\r\nCF-RAY: 9897b3ff2e91b968-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24882,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"36124c66609bcbfc658cab49ccbc43dc","sha1":"4807a48c9a26aafe18728e0f1de98976d140a8af","sha256":"1d7466243afcf48d42499b7d98371f760c1c69aa1dd108426e781d77dccc3616","sha512":"9a3d3c8b7e69d294e0052a5ef1c01c9a5f2d9c654f1820166f301c30c7c1a2ef892907234e4e365bca73fb8386218f03e6aecbe04f90d30110fbef5e0f4e1937","ssdeep":"768:7v7GRlxglB8sZUWu+kz5rEj0b4ZgQX/61R:uXxgA+orEj44/6j","tlshash":"69b2e1ded133afdf90c01e5d3fb0491181a6c75ee20b4a40590191a52ba24aaa79e77e","first_seen":"2025-03-21T05:40:09.009592Z","last_seen":"2026-07-12T17:41:43.816578Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1744,"timings":{"blocked":1717,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/4097fb773f0ecaa3e16dc80294c306df.png/bjsGYlqcJrC7vsoFd61yH2CD0mZTiJdXfALQ3oQY.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/4097fb773f0ecaa3e16dc80294c306df.png/bjsGYlqcJrC7vsoFd61yH2CD0mZTiJdXfALQ3oQY.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 443093\r\nConnection: keep-alive\r\nlast-modified: Thu, 01 Aug 2024 09:45:31 GMT\r\nx-rgw-object-type: Normal\r\netag: \"86bb7f89e9b2adad9b6dcade91787ab6\"\r\nx-amz-request-id: tx00000e96e807c05b4596b-006867c482-1639b45c4-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":443093,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"86bb7f89e9b2adad9b6dcade91787ab6","sha1":"9af44e5e46e7a4d52a6ceef1eff614f7bb1f4e98","sha256":"398a47f398241852e5e84d36a3693781190610c826cbeb2ffa87a6c492ae7c64","sha512":"378c5cd1918fd9e802c1e4b566d0cc107211a89186f816ebfadba4b840d9fe82fe21971697b7fc348ed28d1369362caa78c96610fe8dc3132607c61f0ee7abe5","ssdeep":"12288:WecXgLcceNMjg3DjeAeGUEfiLtDiyI9xcKvMp:WB93NAYDjeQ8t8p0p","tlshash":"509423dea1f4cfa5e89ce81210e12fe5bb5d60cadb66494691c4b360fb377e10c90ca5","first_seen":"2025-08-09T06:39:59.03782Z","last_seen":"2026-03-01T21:47:53.29643Z","times_seen":29,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":461,"dns":0,"connect":0,"send":0,"wait":31,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/Endorphina/0fd2890e79e4ea735a0a92ab86ad205b409beb4b.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/Endorphina/0fd2890e79e4ea735a0a92ab86ad205b409beb4b.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 36524\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"ce1c0a0686b09b8a3d4d78b8e1733d5f\"\r\nlast-modified: Tue, 01 Jul 2025 00:45:14 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1850C0F50D1D7C69\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 5719\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e9gFsGAJ0QgEZOXCIMnpn1wv6lJi7smP1gBtv6GF%2BZPmFFf9M74YE8ehh09b2nfzj6ulAxaBSskFnmiYkJxwlHnwd1ZcDSJqeogNuv9o\"}]}\r\nCF-RAY: 98973a646dbd7869-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36524,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"ce1c0a0686b09b8a3d4d78b8e1733d5f","sha1":"4008e154e32b614d29dd16b6291a5543e462e941","sha256":"43b385f0e8a350d2d2c6241789f41840f4eb0af8ba0f15c0eb4a143ec56d3b15","sha512":"e1058d61c715b31763a9aedfbbf0ea1a56a6ff0c5550732ee16d6bf0b1e8bec8f066f3e27853e91000ff2e58accabd0df40c200ddf6b854be544fbb6f390380a","ssdeep":"768:vRVjKpGLaJehKVkRTwCI99rhho+of/i1qeqy8daU+mg40:vRe2MMVIzZeaSaUfG","tlshash":"aaf2f1f2a9533082c968f59b29fdaf9e215715e1cadc04ce21e7169ecca2c4752a71c3","first_seen":"2025-07-10T10:09:16.279699Z","last_seen":"2026-01-21T08:18:56.836181Z","times_seen":209,"resource_available":false,"data":null}},"time_used":1746,"timings":{"blocked":1719,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DYlnab4-.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/DYlnab4-.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/WmOt8kDh.js\r\nCookie: __ddg8_=ACeYYLIdSVmyOMzI; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=HJEP1Xs217taP6Ze; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-206a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8298,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (8296)","md5":"13a1db090fcfcd0957c03574bdd319d3","sha1":"2b7718666548bdc8f449836bd1021de02836c376","sha256":"39ed25259d86544e2cf5b42045cbab13db2a54b1527a70f107cb1b8ac2003ef9","sha512":"86283433c236f06fa95af5ecf37758ad78c84a5ccfa86dfce24cf55b867e6e22aba171b1125dcdcfc5fbf0468f19180c05e6f6ddbbc3852a06b46de4dcc15b28","ssdeep":"192:JPTBVAnumh4jyMSNXURJ6zZVcnfs3JiVc7cilWqywU4QHq4G8cprkKFfNf/MVxqA:JPO7OclFFnUdSXcm2Bj487Qcvp","tlshash":"2e025678d42ac5f4e1374a9e58d46f413b4d3fb245908896b4f86a3c278a834337db2e","first_seen":"2025-10-04T05:11:03.293965Z","last_seen":"2025-10-04T22:06:20.966917Z","times_seen":3,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/roboto-regular.BtWrZLw2.woff","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/roboto-regular.BtWrZLw2.woff HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=YpBDTEdo6yPaouz4; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=t9u9aH8vh1C8fQQy; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: font/woff\r\ncontent-length: 139160\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: \"68df7ca1-21f98\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 4\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":139160,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 139160, version 1.0","md5":"ae91f35c10375f1dab7137a298aba7c9","sha1":"6b9aae9dddb20bdfc56381f0d64bf54433977413","sha256":"264a621481c81a289ac3227cd63cc91902de13789dd9df920f0e2f465fa2bd38","sha512":"b0253e74fe7baf39316ec12622b1ace4899c51f6ce5c193e0ca2dbf713e4e1ce3d5ed4145d46680a91c68baa44bd73a31834e544c0d732f77975e72424151b60","ssdeep":"3072:2isY+Dpc1q2EHUmPsBut5j+mN9s+EIUb0Psp45nE:Tspc1s0osS5rc0Er","tlshash":"60d31255eb38110ff8be77f86dcad33408f471d5c7a322a4955802abae44fd4ea24da1","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-03-01T21:47:53.345572Z","times_seen":69,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/vip/mainPage/vip-logo.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/vip/mainPage/vip-logo.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=3cSQAEPVUoQw1bC3; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=wCz3Pvx7CGcTlAyw; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-135b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4955,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"15326d24a9c9c1179319a40491a77f20","sha1":"38d1265be366aa25f026d0401f349b1c33459ae2","sha256":"25705fa2dc626c00e80884d3f5169ad4f5ec2f9c6627a0e178747c2f1d78bcdd","sha512":"02b94b969ed3cbdbd99c262a3f8751a01e679e33bf0a844d63c595ae92d557e69a44cab9923f6073c8527d235d2cd1ab068f8bf111b6ea2bed89e28013ae3785","ssdeep":"96:LsShqhVJHu0qUm07P5dm32k+uBdG8h70e9zAzoiboIqlhxFp2jU62I:ISsx60/m32kBGxYzAzHqBFpmmI","tlshash":"e1a1baefb7759df4e885f3f8456500147a6728b738a0ca38c3a07fd9aa8529e9d44cc1","first_seen":"2025-08-09T06:39:59.041692Z","last_seen":"2026-03-01T21:47:53.355466Z","times_seen":39,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/hNTNdTBUxlC7sKgBnvnoNmTYkvzt3FOEqBNn5P7D.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/hNTNdTBUxlC7sKgBnvnoNmTYkvzt3FOEqBNn5P7D.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/webp\r\nContent-Length: 57252\r\nConnection: keep-alive\r\nlast-modified: Wed, 17 Sep 2025 06:05:57 GMT\r\nx-rgw-object-type: Normal\r\netag: \"b57ae9c087c2d21965b71da0f80fd8b7\"\r\nx-amz-request-id: tx00000e6d172d6e652f60b-0068ca4fc6-173b8ac76-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57252,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1380x736, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b57ae9c087c2d21965b71da0f80fd8b7","sha1":"1c8b64f23b7bba8d993b213f2c56d46c2aeaccee","sha256":"cb696e64f16997d31fda562d2128f019bfa0eb7807973982de391ff8418cb999","sha512":"5278708eeb8f6e35ca650fd7f224d32f8e26d8057fdaaed77a58e19084bea1e221e5cf441c59c204578d65cea51e067a80574eba55e5166538474f2263e8309c","ssdeep":"1536:A8lP4vydcUbdpg5bwVB4Q8pkb+ICMK+86H48kOLF5:A8l+ydcWGxQjb9CMK+XHFFJ5","tlshash":"8c43f107140a0ac776fbb2ce8f79e66575fc8a32e91d2907505ce5c3b218b3622df498","first_seen":"2025-10-04T05:11:03.534Z","last_seen":"2026-03-01T21:47:53.475861Z","times_seen":24,"resource_available":false,"data":null}},"time_used":1176,"timings":{"blocked":1148,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_ipx/f_webp,avif\u0026densities_1,2,3/img/home/home-aviatrix.webp","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_ipx/f_webp,avif\u0026densities_1,2,3/img/home/home-aviatrix.webp HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=axWMToMevviSY80o; __ddg10_=1759615530; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyOTU3MiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jNgjIjE2ceVFjr4c; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\ncontent-type: image/webp\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests;, default-src 'none'\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\ncache-control: max-age=60, public, s-maxage=60\r\netag: \"df4e-8g5e5fp1T6nH5M79+ovDyRTiklM\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":57166,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1830x1200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e69a9f84442238c66e229878fc2cc7d9","sha1":"f20e5ee5fa754fa9c7e4cefdfa8bc3c914e29253","sha256":"9417ec88d0bd6956206142d851a40e6665defe12075717688956e37c69a91c1a","sha512":"06ffc8a6aefc0541b85f45c28c1f995e03a2010ea2cc4e9a26e523287bbc2b3fed413e0d5c0d624a1b4688364a80b75c4a46dede2d211c068bc5c7ece6758648","ssdeep":"1536:ySYwoYfrg0RY+cL+JTan7h7/TKnWpe8uud2/nw4bih91jI:yTFw35cL+w7F/WnvAI/nw4W3dI","tlshash":"6143f1fc08f41f62a4c6a62f54b57c8903b412a7de62646b340a1c13c6e6d370fa3a7d","first_seen":"2025-08-09T06:39:58.867511Z","last_seen":"2026-03-01T21:47:53.513864Z","times_seen":34,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/Jv8jlA-BQE5JD6rA-h_iqNH2/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /recaptcha/releases/Jv8jlA-BQE5JD6rA-h_iqNH2/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 349597\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Oct 2025 00:59:26 GMT\r\nexpires: Sun, 04 Oct 2026 00:59:26 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 29 Sep 2025 12:04:53 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 75966\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":820265,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (611)","md5":"79d46b9e2a42785f28f64082a61eabbf","sha1":"c1b66a198b40bcd1f6cce34704173f997ecd8608","sha256":"6159c42218db471f012088abd52e60fe39e5c1dcf2981ff7d80f38d8bd36a690","sha512":"820943d8b4d684933ce756b9d59c499147aae8336a811b042d8ee8bf035ecb20be12ff815d0ba4a8676c815b9e6bf2d687591d434bedfbbf07e56dae34f39c49","ssdeep":"12288:iF/YdSVcst0yzYy0Vqqog/cT6eKb54lptHAgR1BoOdy3aWKi:QQozYJog/Y6fV4lbpR1BRdyKK","tlshash":"b70529c870257a624332b5f6707b209da36e5966d45c095d70a6c4f03fb098db0baebf","first_seen":"2025-10-01T09:12:21.067891Z","last_seen":"2026-06-02T23:59:04.965062Z","times_seen":7915,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/pragmaticplay.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/pragmaticplay.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ddwpOV5hl0PU61C0; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-770\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1904,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a7d8b662ed646fc3b9b3b18ffae282d","sha1":"b22756c8b2f9cf53a5b5b0f53265a2f3331edfe3","sha256":"698a39d7e57e623e036917ac7963c2ae6722fb9451db3f8a343ca2d3e3c1d497","sha512":"7d4fd6212a27ca260ea86a86cbd84b83ae1580aaa5db7349861b717ee16e6ecd4898cd3e4088a51d987d7ef093dfca18b06ec74fe301530266dc72125aad4422","ssdeep":"","tlshash":"1d4164c867ccc2a0c94a9bb71f19b46d56533cfa6f2188ade3b10a10751845ecc68dc9","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.828382Z","times_seen":68,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/macawgaming.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/macawgaming.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=LhflOPXOStYGkIbs; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-e0d\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3597,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a64857193463cc5a699c9859bd0424eb","sha1":"31a60ecc62a7757160d6d58b767444f599cb9ba0","sha256":"556fddcc2b950f549a72e74525a921700449590527849a874f2f45d724a277a6","sha512":"13f341a3ea2bb76649a7dae5b8809b970eefa8b5df62f02368ea5c16e529a04ca3ee6b497531848cc51fe026f350efbed22a99e139ba5e26f7dec924b787acd5","ssdeep":"","tlshash":"427182a1c3f862e4f009b3f0862698b6365729fe3b12df4947ea6e60821100d89d9c93","first_seen":"2023-10-28T21:30:08Z","last_seen":"2026-03-01T21:47:53.20689Z","times_seen":37,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/cryptojs-aes-format.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:26.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /cryptojs-aes-format.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=bzfSX9mw9N9VCTPX; __ddg10_=1759615525; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jQphPslhljVsozNM; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg10_=1759615526; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca2-5d6\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1494,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"e6bc38f77922eaa6f1b23716034b4a2e","sha1":"db781b1e30c4f2a1d63d47054f0903c463cf01ab","sha256":"9ca00bddae85e30d59672da0089ea5e132df97d75a92f42114fe1befbaeaf32d","sha512":"0ad7c00c1564d77f8463dfc81003c0d6cd6ada4e3d01094331f72847f17718e4a6b2c7a2a0bcbd96a1107bc6cb9bcb1721e7b2968ae4544595ab98d39bb30c82","ssdeep":"","tlshash":"163177407debb4c287e8e1d50435a044f67b7a0ab1558ef3aa5aa404ffedf3006326e4","first_seen":"2023-03-07T18:27:54Z","last_seen":"2026-08-07T16:57:51.090464Z","times_seen":717,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/best","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"GET /games/casino/best HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=QEF1jK0xvd5UXG7d; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg1_=ifvmHnUchKFcR6j9Q6rr; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 89\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: cdf41d35-0beb-43ce-bcce-2bc53a09341a\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10304,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3c7c50cf7abc26b8c4b71112612866e7","sha1":"5dfadbb374aabd974458e7fc0e12c63ca3dbe485","sha256":"b86e3b781ca1cfc01bc1cfcfdf9e8c1676e4b6a21e2025add9a18faddf6a91f4","sha512":"43d5d4164cae69de0805ff407774d2c4759d1ce8cac731624c3d2995ed80cca2e47ab6652f20d69cf706dbcf0d3e12748c2f503fad9e5af7ce23a7e3f1c78a80","ssdeep":"192:79p5/OR3azgnKgeZ8dGDhEh8hDjDVNxFrnM:79p5cqMncGe6+FBNrrnM","tlshash":"2b220153298038a24fe672e44f6f7f9578c80917516cb913f8caec6500a15f76329af7","first_seen":"2025-10-04T05:11:03.522509Z","last_seen":"2025-10-04T22:06:20.97275Z","times_seen":3,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/images/file.svg","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /v/images/file.svg HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:30 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 9286\r\nLast-Modified: Mon, 29 Sep 2025 21:14:19 GMT\r\nConnection: keep-alive\r\nETag: \"68daf6ab-2446\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9286,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d6d4ad1349f997af8f4bc6e45fc6d2ed","sha1":"7908555e4ba3d3c73eba84266f800120c43270e5","sha256":"56d45428cf96355b298c7f5c023ab7c004583b2a136af450968c55e1486e2453","sha512":"1e011720c337271c89a7571cf2a460d07fc075c54311d2707768a43caadf966bf410349bb62eac2db6e729c48d0e290dbdf477d3a347ac3cdf4c1333cffeed3d","ssdeep":"192:C3ISknUnObdnWlZohOWCXQuSSnnnnnnnnnnzmEfPWsLb:gISkUxlgmZSKmLs","tlshash":"ef1209797706aa5a0b718f25e04191227d281c2fb37a57d0f48d5ec3b326c407d8adfa","first_seen":"2023-11-18T23:23:23Z","last_seen":"2026-08-02T00:07:57.693015Z","times_seen":1613,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":128,"dns":1,"connect":42,"send":0,"wait":41,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/YpTHRXUVV8y3Te0EwAmQnmennzgNXFUTTu0dP0XM.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/YpTHRXUVV8y3Te0EwAmQnmennzgNXFUTTu0dP0XM.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/webp\r\nContent-Length: 73956\r\nConnection: keep-alive\r\nlast-modified: Tue, 15 Apr 2025 08:15:37 GMT\r\nx-rgw-object-type: Normal\r\netag: \"9a773c21983467c255fe7bbd02667fb7\"\r\nx-amz-request-id: tx000005c3e540b8f07d4af-006867c79a-162bc1ad6-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73956,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9a773c21983467c255fe7bbd02667fb7","sha1":"db1e348493ca3ded5f629218d4471e7471221149","sha256":"ffd11efe09b4bc901483802f03afb981adb9946d496bc911e6df0d016dcc2e1f","sha512":"4db5829d92e1c5b160facabb86fe2d2ed9c72f6c53d3ef5dff41f3470006640143fe5a4c7c12483b9b0344e1a7b5f6b24f986723f55cfadcf3ce8e60a98c4652","ssdeep":"1536:jbntPzGRq9da5rMnDuNP8C1VJ82pLpdcOCacUc9QevCRaXpQV:XFT905QDuV8C9t5UCJc9QyCRa4","tlshash":"7a7312a432d02955287fe7d1bb9e6e8c017133101fe092db866e7d7e9e0793419d623d","first_seen":"2025-09-09T11:33:29.135285Z","last_seen":"2026-03-01T21:47:53.239614Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1177,"timings":{"blocked":1148,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/b533e8ba711eb7fef8a694ee73ae082c.png/oJhKImNnZQfq6mQkjasFuYjsLbEswG3G8hLW2amH.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/b533e8ba711eb7fef8a694ee73ae082c.png/oJhKImNnZQfq6mQkjasFuYjsLbEswG3G8hLW2amH.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 462515\r\nConnection: keep-alive\r\nlast-modified: Wed, 16 Jul 2025 13:29:18 GMT\r\nx-rgw-object-type: Normal\r\netag: \"9cf315bcb928defe08150287b604caf0\"\r\nx-amz-request-id: tx00000c1c8b2a9b773b8c1-006877a92f-166dc57f4-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":462515,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"9cf315bcb928defe08150287b604caf0","sha1":"c51742d98ea2a05a8b9c634021d5650e560877fc","sha256":"4cdd3151236420f31ca996641d610792403d7a5a1806b485a667bdaafe581998","sha512":"9abcb8236e87b046159b7a614be94bd4a1c8bfc4f39f4c26c41eaa9892c0bc2162a73528753edcf84c9bf8264b264f1481f07c62f9cc96d2fcff80e939e6cb9f","ssdeep":"12288:rKLvq/4MM4/qRSBlPeX9FRXIpg90btSdFgJczWQVPry:rMqwMMAqSBRCqtcccjBry","tlshash":"68a4235930bf813aa5f29e60a3e635f312a6091eff5346c42c7ecc647b6d1a14c846b3","first_seen":"2025-03-21T05:40:09.027316Z","last_seen":"2026-03-01T21:47:53.268796Z","times_seen":40,"resource_available":false,"data":null}},"time_used":801,"timings":{"blocked":314,"dns":254,"connect":28,"send":0,"wait":54,"receive":117,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/haTT5Cld.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/haTT5Cld.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/CkMSVCQx.js\r\nCookie: __ddg8_=vZnSJyHjLfGt1Pqf; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=s4WLCiL5zwHBizmT; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-26d\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":621,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (615)","md5":"0b3643735fb5f19f98de7f3d5d35b554","sha1":"a58338f254cbbb8b3627a25ff613980a074a607d","sha256":"d162ec9326203b98a953fe3085fc56b25dd666a614006d1ef9f99abcf6278bd8","sha512":"2f4dd643579e44157dfbb5599d2c87bf9f97caef5a658693548ddc1c459542d125e47197ca2944527f93eb5cebc7afd012caa1e9df228c3899fb5711121ed282","ssdeep":"","tlshash":"5df0a68fc09284bca145ece0d431c222137a68b727f5eaa8c2cf2b346340035c88929b","first_seen":"2025-10-04T05:11:03.664228Z","last_seen":"2025-10-04T22:06:20.976956Z","times_seen":3,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-04T22:05:28.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwch64x.life/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=oXiG7bBb8tZybSK5; __ddg10_=1759615527; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=8Ts3zEx2DjVR8E68; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:28 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Nuxt\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":404308,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65063)","md5":"186280b40781c9d4bd1e283795d976ba","sha1":"e7d561bef334dc76a4196bd5709e22e405be1e42","sha256":"1fb00c5d2039afdad23f4a7717ce64fc7d77f955f06afac25547350d36bcf34a","sha512":"0b6b262b61b2988ff2a9acc6421c598c20b5775de00ef2f11203fa35d59f737630ec604b15653c438972646c62795928dfe96176e0797b6dd5e54c78cd38d9e6","ssdeep":"3072:7JYXSbqAfuybg1s705YOwfwONtsEb2F61UbFDT:HbqAfB705YOwo4tsEb2Fhp","tlshash":"5d84d5d36630342ea16fd457f1a1eed8f434a815d31367ebf1e61a25cbc2c861663a38","first_seen":"2025-10-04T22:06:20.798017Z","last_seen":"2025-10-04T22:06:20.798017Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Br1FBsO3.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/Br1FBsO3.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C72coOWc.js\r\nCookie: __ddg8_=QTv0NOnNCsLmc82E; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=zHbHWenZ5hvpR6Ep; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-405\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 645\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1029,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1028)","md5":"767f58379d7921f95c8dc6c600a3df03","sha1":"13505dd414f4a7979cc3098535dd88e1e1ce193e","sha256":"fa877f9e586ac8365282757cb02e92b352649b7ee3f6cb33eb0026bb4f1c95e9","sha512":"57b4279a8e6d24ffa4bd77e6812666ea155eca8cb4fc3c1de0b42259393b937babb44298e1a70c2910ef36fbfc356c2e4aa32b36583304980a9e2f2fb98062f9","ssdeep":"","tlshash":"9611ce2bfa4a1b6263331c7646a931e6cf650b8b2c7994c43c54df261237c83e5a6f54","first_seen":"2025-10-04T05:11:03.632172Z","last_seen":"2025-10-07T18:16:30.14286Z","times_seen":8,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Dacnxtee.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/Dacnxtee.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C72coOWc.js\r\nCookie: __ddg8_=QTv0NOnNCsLmc82E; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=LUihMVCSYL4l0R8P; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-56\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 86\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":86,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"320ec157fca2c96c27d5b58c11f14b89","sha1":"e0e5dcfb335de172aab5aaab6508452391e5c3f1","sha256":"afd2b3f48c1cce3897968123d1242e363126ef7fcfa9cb926362b79efcc7d4c5","sha512":"83a0fdbfc245ffe78730b87d76e85b4111d45fca04b25835a6cd24961857e9f68ff3bc21519d21ca8561d0acc704396c2144ca92393e78030ea6048c559c3794","ssdeep":"","tlshash":"a3a0120a0450007d208608e4675b509955e0142613b55a8100004a0106154de650cc00","first_seen":"2025-10-04T05:11:03.670272Z","last_seen":"2025-10-07T18:16:30.094419Z","times_seen":8,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/C28Ks5WD.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/C28Ks5WD.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/CkMSVCQx.js\r\nCookie: __ddg8_=a4BUeGnghPaJJLZP; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=e693VLwdJtJULGR9; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-34783\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 53952\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":214915,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (62123)","md5":"226f97aae05b1bc8517bf6e8357b2035","sha1":"ec26d9e8486f92c5be054c7bbb23c607efc40016","sha256":"3a540feffb54425661775040e9d000fc91c8541e60a10d28b4916048e20d7c69","sha512":"a3f3fe091a35f13546658cfc513bdb66fc91a4fc90794d5ddfb88b64b6291a59029695134bac483280d8e88206b6497415122e156c68d87abd6a8324435c4057","ssdeep":"1536:7oDsoGxvPYALxa1k9CdeIusU1aCrhquwRpeQIvkn459rS90dBuwRp0r1GcJwdAfH:zZxvPY0L9sMawdAfGvM","tlshash":"03247daee38690fde12b8794a44b381431752ffea681cc8381fc5d0466268fc57ede65","first_seen":"2025-10-04T05:11:03.298502Z","last_seen":"2025-10-07T18:16:30.073415Z","times_seen":8,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/4aXjxUSr0xApdu9RQKawYIQdWBDywFZvdvzAY5rG.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/4aXjxUSr0xApdu9RQKawYIQdWBDywFZvdvzAY5rG.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:30 GMT\r\nContent-Type: image/webp\r\nContent-Length: 90310\r\nConnection: keep-alive\r\nlast-modified: Tue, 08 Apr 2025 10:07:29 GMT\r\nx-rgw-object-type: Normal\r\netag: \"fca035075eba496e0083ea0c08e2fcfc\"\r\nx-amz-request-id: tx000001994005420f3b1d0-006867c79b-162d5ff72-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90310,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fca035075eba496e0083ea0c08e2fcfc","sha1":"a26a10cf916f8055e48fde5e8ec4d20618ed7ae5","sha256":"5113740d240d322b2adad91042190fae6801e53f236a54f87c7f3ddd5f6de155","sha512":"c7e2020d3f95c3257161eccc926c0fd2cc6abac7f3794c161c41d45c3d71cb5b189db524a9a5521e0e4bcbc625124624186df9e7c8e99b8ff8639e621c1c6525","ssdeep":"1536:+Tvb49+fTx8BMpjDLFOHwyYOPKfKCfobjO88BYfSbCfluldY7CUZtdQ0m2OqlN:+Tvby+fl8O1qmOPcKIEO8fp4zUZXf/Og","tlshash":"3a9302f2db0e20d09354dab3a6762244342b5ca6e7f36ee1211a86c1d75fe84370ae13","first_seen":"2025-08-09T06:39:59.108778Z","last_seen":"2025-11-28T02:25:21.188333Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1843,"timings":{"blocked":880,"dns":819,"connect":28,"send":0,"wait":54,"receive":28,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/statsGames?limit=4","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"OPTIONS /games/casino/statsGames?limit=4 HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwch64x.life/\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=KGFmkL8Jx8RTKJEr; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg1_=KOc1QZoyyL7KAERDq2Pl; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: b032f711-baa4-4877-a939-28beb1198556\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?en=page_view\u0026dl=https%3A%2F%2Fgwch64x.life%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=1826609849.1759615528\u0026dt=GET-X\u0026auid=515335589.1759615528\u0026navt=n\u0026npa=1\u0026gtm=45He5a11v9186219929za200zd9186219929xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~102015666~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948813~115480709~115616985~115834636~115834638\u0026tft=1759615527966\u0026tfd=2395\u0026apve=1\u0026apvf=sb","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:37:19 GMT","end":"Mon, 08 Dec 2025 08:37:18 GMT"},"fingerprint":{"sha1":"71:09:AD:C8:6A:D2:25:DB:C9:D9:5E:5B:C1:06:E1:0D:D6:39:D6:F0","sha256":"A9:72:F7:39:49:86:27:92:AA:EE:65:04:99:A9:0E:A8:02:70:01:E6:72:46:C2:FB:DC:5E:5E:6B:DC:B8:27:A0"}}},"request":{"raw":"POST /ccm/collect?en=page_view\u0026dl=https%3A%2F%2Fgwch64x.life%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=1826609849.1759615528\u0026dt=GET-X\u0026auid=515335589.1759615528\u0026navt=n\u0026npa=1\u0026gtm=45He5a11v9186219929za200zd9186219929xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~102015666~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948813~115480709~115616985~115834636~115834638\u0026tft=1759615527966\u0026tfd=2395\u0026apve=1\u0026apvf=sb HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Oct 2025 22:05:28 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://gwch64x.life\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":50,"dns":0,"connect":9,"send":0,"wait":19,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KN757LMM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtm.js?id=GTM-KN757LMM HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 04 Oct 2025 22:05:28 GMT\r\nexpires: Sat, 04 Oct 2025 22:05:28 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 04 Oct 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 131004\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":385898,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9788)","md5":"01ef3cf42fabf5d6ef0376c8e8c5ff40","sha1":"893fddbcb533c9bea894ea564f1db55b1a8cd32b","sha256":"55ca58ec3e3b3b66b5cc13a1f9558ee4df75e4da160014ccb21d8c52e067f6e8","sha512":"baf35c96cdb505d8b87f58d784e9c11945464e26cf1e42f9ac45b0dd417a171af981d73a66d3c3654d52356ccd77dc3bf1efcf7adcd9b1b9af4dd2b123c7a5aa","ssdeep":"3072:LRb4bfV2o5qOTaksP0GIOU3Ty9durXx9COvCVK4N6znVg9dihva0ZUiMLXX3AAmB:lyLTlDyYvRCV9dIi1LXX3AAmozKEXwJ","tlshash":"ba8419cdb3c674664393a478903f014ba1bb69a2f44cd895f185dce42db4aaa4237f7c","first_seen":"2025-10-04T22:06:20.981157Z","last_seen":"2025-10-04T22:06:20.981157Z","times_seen":1,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/q3LSfRvN.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/q3LSfRvN.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=e693VLwdJtJULGR9; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=uYQ2jYYaX6FYlC0d; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-1896\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 3076\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6294,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6293)","md5":"aabcaf406092d2abfaf2865f8d6c345d","sha1":"dff4a863c03268754af54820528972e654b1b835","sha256":"3f9400210e7096afbc7663147fe16f41f85982ac363d1c8506040c5b38572ca2","sha512":"f9af6f7a796692d9ac07af0d7f8e19762d1fb44cf80af21335aaca29f928c5008d33e2156c039095e45a8590d25edf2bdb42d2dec34d2314d057f02001b773a2","ssdeep":"192:PpazyEaxrcxshi0pM3bumtmRNwDA8T4uC3/bR5AmMbgj9ak9rLX:xazyEaZcxshi0+SPQDvk/F5rMS9aeP","tlshash":"30d11bccb4a67021b3774ae5d0b78107763829a134cbd4e1e01eded73e15a62a792d8d","first_seen":"2025-10-04T05:11:03.316834Z","last_seen":"2025-10-07T18:16:30.09229Z","times_seen":8,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/api/v3/welcome-pack/get-welcome-packs-guest","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"GET /api/v3/welcome-pack/get-welcome-packs-guest HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=JwJDhJHJozbCqFn7; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg1_=UtwrGU21e5YnBfPy7QcA; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 9378e74b-16a5-45ba-87e8-291db8c608f5\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10093,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9930421582d81d34edb9e0f3e9392fd1","sha1":"f1821c52e1d421bec011f885114f289e5b89f453","sha256":"8655f718bd00238e8c5cdc5614b16930b9ff6b0ac1addb45ced30c767dcc26b8","sha512":"fd060c3a4d61a625cbb5bdff878d2e049e3d8e61e504e5b9fec7f84fca926dc5f3242d7df4035b95f1b06b15fc5c84abf577309dd62f961cc96e2b111d600eaf","ssdeep":"192:2ACnA5CiLs8CN+Xj4CIMqcCbCB0eAv0mI7e3/rgd1YS:JCA5Cz8CEXj4CLqcCmMrgXN","tlshash":"58221fe288ea1b6c199a36e3da73bddd34e43189d160c733fc7e7607d300661aa51b16","first_seen":"2025-08-29T06:11:20.853498Z","last_seen":"2025-10-09T10:23:07.386478Z","times_seen":9,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/fonts/Roboto.ttf","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /v/fonts/Roboto.ttf HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:30 GMT\r\nContent-Type: text/plain\r\nLast-Modified: Mon, 29 Sep 2025 21:14:19 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"68daf6ab-29144\"\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":168260,"size_decoded":0,"mime_type":"text/plain","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", name offset 0x96000218","md5":"73e5e33319edb8e4c97e37cdfe616cb8","sha1":"7784f765a8fd13fb67bac14cf3c11373538955c8","sha256":"f66c295bf6f985892e07ce64d2df9149416ef950f9b65420b7de2e6f5ba0175a","sha512":"658ae380ebd8cb5a040d69d0bb8ed94421013298913fc46ba9bc010c017a2e72cdf162672a94852f466a1f764aa09e0c88cb19c3e73c1d2c616d08ad0786d318","ssdeep":"3072:RCgWJENpDQoK6jS3I+/l3mRDOTAzM7t2eV2dlNvVWgHkLAHX3lbgva:PCENtQVmNO8u2eV2h3kpva","tlshash":"59245106ebcebb9ec14093f33dabdacc56efe4225d51e513c64b6011ce05468a71f62a","first_seen":"2025-02-09T09:50:26.857461Z","last_seen":"2026-08-11T14:18:48.499332Z","times_seen":273,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":127,"dns":0,"connect":41,"send":0,"wait":130,"receive":42,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/espressogames.png","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:33.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/espressogames.png HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=foZ2rvSp0eAXwQvR; __ddg10_=1759615533; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.143; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=lvbhx5NJVOxyu3M0; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg10_=1759615533; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 1296\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: \"68df7ca2-510\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1296,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit colormap, non-interlaced","md5":"3ace5819ac2b5d62bdd1309abd1b08cb","sha1":"b526fbb6a5bc94360fdb050ff616ca21742a4886","sha256":"403267a769888d0d63629e2a4a14bb29039ccd3f5e30dbb3d4c3ab3053388a8e","sha512":"fe228a67da3efe86aa772937c1eb34232958bb3b3e0fb4a6144ca51e07ad1b3f3669aca53aa1aabd725096a265698c5dfa48cc51b95c677cfaf3326d53e709c9","ssdeep":"","tlshash":"7221c85fe386dd0cffcc67998fe00470cf53a0734b4a9d0ab4886819a9c21976de6362","first_seen":"2025-08-09T06:39:58.926279Z","last_seen":"2026-04-15T02:03:05.965677Z","times_seen":62,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/kagaming.png","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:33.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/kagaming.png HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=f9dgo2W9uw7b8OX3; __ddg10_=1759615533; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.143; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=rXdfIjQlHmfoiKxO; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg10_=1759615533; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 2844\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: \"68df7ca2-b1c\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2844,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"c73e8335e02c283c022ea47f9b072f28","sha1":"1587e6a4ad71337f14b822fe81d535b8fa41a793","sha256":"e01a0057456828bd333d553d66e4edb9bf36cdd9f797f70fd0eb925807d209fe","sha512":"6afc2ca7fdbe5e2cd3680bb6c95b3e249bc5f03bb817e6f4d21e6ca5db975ba7c3fff0f912d046d881df97dbb4f4e93841656fc89ff9e73c4c7217fa92aa2cab","ssdeep":"","tlshash":"df516db575b034615e9012f8180f11089bc299867903aaed800bc137ebc90a6b3c02ff","first_seen":"2025-08-09T06:39:58.927401Z","last_seen":"2026-04-15T02:03:05.950904Z","times_seen":62,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/js/pwa-load-event.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /js/pwa-load-event.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=8Ts3zEx2DjVR8E68; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=f0PmxCOYZu3N4SBo; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-177\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 164\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":375,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"f463b05f25296c1e185cc82087291f6e","sha1":"d15dfa009eaeeaaf36af83b20ace25714adbc583","sha256":"3f5bcf295bac81715b4413d640843ee19600f6a17c96503038c6a4193c331865","sha512":"5ecd0baa189383e24afadcbe391266fac63cdcdcb7da68ab1371168fae81f05f0140b4dcd86bc4cc59f4ebb3f5949e94b302f05de00942886fe3060436ae03bc","ssdeep":"","tlshash":"64e02b7483fc55b808e182b75f47bb15116721a77068d990c1871906f8d148780a2fd2","first_seen":"2024-08-19T15:07:41.99372Z","last_seen":"2026-04-15T02:03:05.836861Z","times_seen":94,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/vue-splide.C9Z0wB1j.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/vue-splide.C9Z0wB1j.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=PI4A7Hme0mERb8lG; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=GKeZxeD1H3CMrn9E; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-734\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 4\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 676\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1844,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1843)","md5":"e638a23113de5c173bd45cf1ec17cedd","sha1":"5e71875f9d7d6d3240729a9300e2be7b2c49d0d2","sha256":"25fecdb4c8330c6bfab65a09dbb53c0d8f407344f2ba4f4438bb48293444c846","sha512":"c76d640e7077019c6c609684d476a47b812c67eb4fbc8cf85240d2bc6e96e5254434483c8c8046b15b3683e09c749b26055b48f9656e0dbf5d78bad8aa18872c","ssdeep":"","tlshash":"fd31442240c92f599843973229bdd7a964eec2534e6302baeaded320468ad4d07e49cd","first_seen":"2024-08-20T04:44:02.347145Z","last_seen":"2026-07-20T07:08:57.528836Z","times_seen":137,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/ext/cdp-customer/v1/analytics-js/snippet/233e4c5f9379d04ec864/analytics.min.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /ext/cdp-customer/v1/analytics-js/snippet/233e4c5f9379d04ec864/analytics.min.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=7fW6f4jk6U5hq5yD; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=rcfaakZ2zXEo1XFl; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:28 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\netag: W/63cded814d76830c4a89761ebeb3242e\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: public,max-age=300,immutable, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nservice-worker-allowed: off\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":106254,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"009ba376452e3bdba0f98538c0575d44","sha1":"7fc6cb65590b122da408e8206cbebe360498ffed","sha256":"c31bef488aa8dee63ffe8601ea74d02285c0e9f189ff5540a94637b3a0fe99d9","sha512":"925ed13622d0b785921820f1b52ab0ad19ad44b8467ec1e15dfb03c9327dbd16ef037e1f11f9fdf80cbc4d9104c08a62c02b4651786efad4547aa5dc11dfe89b","ssdeep":"768:0xOyftQBCLo1sw/cexpme6piT5nQk8v2RbgFoF4OnImsSfWdLyWQL9ZsBpi0vRxv:UtQBQo1sAIeaE5Qk8uV4oF4OvpU5xMMf","tlshash":"d6a383c8f6e6f060439364b8803f110bf23e795e680e84a4f266d9d66cbc59d9127f79","first_seen":"2025-09-05T15:12:16.336085Z","last_seen":"2025-11-07T14:36:24.450735Z","times_seen":219,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/fonts/Roboto-Bold.ttf","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 09:53:58 GMT","end":"Fri, 12 Dec 2025 09:53:57 GMT"},"fingerprint":{"sha1":"61:27:85:A8:38:1C:25:65:78:46:2F:EB:0D:19:3D:18:77:6D:AF:29","sha256":"97:98:CF:E8:F7:F2:FB:80:66:4C:5F:C5:F7:97:B9:3E:B2:86:BC:56:11:C6:BA:D5:EA:6A:25:FF:FF:68:CD:F7"}}},"request":{"raw":"GET /v/fonts/Roboto-Bold.ttf HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:30 GMT\r\nContent-Type: text/plain\r\nLast-Modified: Mon, 29 Sep 2025 21:14:19 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"68daf6ab-28da8\"\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":167336,"size_decoded":0,"mime_type":"text/plain","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", name offset 0x1900020d","md5":"da7ecac250e13817947dd1f5c1571f91","sha1":"aa8f07e3b700656a5cb3a0a402451d98e796841a","sha256":"027ba3f46b3e647249971010ed596b9443d4eb95b96959582fbe5a1f8b83bb16","sha512":"506f2623384972a3969a8ba6b0665de8bb1d708d1e0e143ea77bf559c8bf82b678f57db34cc3240411e8679a4a86c532b2328eff4d9c4b8da2d226c78e7dd0af","ssdeep":"3072:11FSM9EcsQqivOV08PlIgn/CsDQVb16yyfHC820XRuX/4XhXXXXXXGKkxIMoFKna:fTsovQ7IgnLcTUfxhdknoena","tlshash":"0e246503ebcfb7aed14083f37debca8856eff03a5d11e557958a2011c905498a74f62a","first_seen":"2025-03-21T05:40:08.901524Z","last_seen":"2026-07-17T18:42:53.960132Z","times_seen":160,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/best","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"GET /games/casino/best HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Ng0U3SV3KFQez9OE; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg1_=Zkyf2bH1bJfmVsGUA8mW; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 82\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 64be3f51-d9a5-4f1f-823f-0dca2390edcf\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10304,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3c7c50cf7abc26b8c4b71112612866e7","sha1":"5dfadbb374aabd974458e7fc0e12c63ca3dbe485","sha256":"b86e3b781ca1cfc01bc1cfcfdf9e8c1676e4b6a21e2025add9a18faddf6a91f4","sha512":"43d5d4164cae69de0805ff407774d2c4759d1ce8cac731624c3d2995ed80cca2e47ab6652f20d69cf706dbcf0d3e12748c2f503fad9e5af7ce23a7e3f1c78a80","ssdeep":"192:79p5/OR3azgnKgeZ8dGDhEh8hDjDVNxFrnM:79p5cqMncGe6+FBNrrnM","tlshash":"2b220153298038a24fe672e44f6f7f9578c80917516cb913f8caec6500a15f76329af7","first_seen":"2025-10-04T05:11:03.522509Z","last_seen":"2025-10-04T22:06:20.97275Z","times_seen":3,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Loading.Bk2PI8_1.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/Loading.Bk2PI8_1.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=PI4A7Hme0mERb8lG; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jVCl8LCaih1ng8wG; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-ee\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 4\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 144\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":238,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"972ff87ed4252206f8f9d733a46cb522","sha1":"9998cd5afd3ccbd6aaa949b68fdf49bf05224cdb","sha256":"5ae8f77f7cb1ee4548d819e6f03fe4e3fbfcc50845c8ee77480d3f08a86de00b","sha512":"1dd31797719cb3c45a9694f1e7dc1bafddbe7da579d78d6aba797d4599ac185310493de67489970b64846b0d612979cae66138ad87b50721b24adbb78cfcc180","ssdeep":"","tlshash":"51d0a7d5864444530f670a3311cc5d59c8b02ec2c8be1c1eb399d1aa03492a933b7e69","first_seen":"2024-05-07T05:56:59Z","last_seen":"2026-02-25T19:06:54.055809Z","times_seen":57,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/4rtQVv8W.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/4rtQVv8W.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C72coOWc.js\r\nCookie: __ddg8_=QTv0NOnNCsLmc82E; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=d66gUsfweadtGZTg; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-103\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 195\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":259,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"fee98e2133557b5174d80c41eb5ebc14","sha1":"bed9b980ec37764ad8100634005e005bc18a0798","sha256":"a69a8cdcdd23f4eccbff43ca93c4524fa6285410da77b6d14b7177e900a25ba1","sha512":"410b0aae21ddb19ae205427032d36117ac8053b36f1bc355b00b316ad1db1710e1b556d9b4c1a66c0f7f8f60031588d62ce11338615f75ac0872fb28c1d52165","ssdeep":"","tlshash":"77d02b5d503290741176055908db0d06d147a4b9332552246562aa752698592464ae06","first_seen":"2025-10-04T05:11:03.22978Z","last_seen":"2025-10-07T18:16:30.111211Z","times_seen":8,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/apple-touch-icon.png","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=jyTtDnazfXCVdlqw; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ujpe1YYUpYF0YJOI; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 5476\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: \"68df7ca2-1564\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5476,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"b0fd6219c3cc6542ac16de5fb1a803e5","sha1":"32e23eec5c195ebb1288a30e3eb88fabef54d68e","sha256":"3de26349c4bfab8a20055a516f6a01a3e26870922b5e158d25b222150248bb9f","sha512":"ca31b6c5eed2c86716e420501bba2bd940b0b74627e9acf6c535e1391dd518851aaa699484966b2c9b463af4b84fea8a91072966e6d355f12e7bbd7e04b724a8","ssdeep":"96:TitXRWWOLtp6cCMcakSchLRel2CgQ+dwmcwveg4tjvR8VRtvS:TUoWOLPIaihg29dwAv5Vi","tlshash":"b0b18db839459902eec1e13923565bd0af3111a036012c4a136fc9375b147a23abbfdd","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-06-26T20:23:29.98019Z","times_seen":156,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/cP4DhJ7l6T8xQCQhoVU5T7oro9V3QAkOTx9FxmzX.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/cP4DhJ7l6T8xQCQhoVU5T7oro9V3QAkOTx9FxmzX.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/webp\r\nContent-Length: 64128\r\nConnection: keep-alive\r\nlast-modified: Thu, 02 Oct 2025 10:09:11 GMT\r\nx-rgw-object-type: Normal\r\netag: \"2704615245db1e681a000298aef4b4ff\"\r\nx-amz-request-id: tx0000049fbae79ad09ee1a-0068de4f4c-173b8ac44-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":64128,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1380x736, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2704615245db1e681a000298aef4b4ff","sha1":"9c8fd1fc70760714cdbf56aa2909f972d7d7c73d","sha256":"bc14348c4547c00cc2c0b7b0d015ec6e26568b535644160cc341147e111039ea","sha512":"6185f4a408826c6b1e894ce5758b4ec1a7a7ed877489bc75a85ca56b80d996eb9db16e67cdfece19e116ecb664801d20380110556875f1a541aefc373ad2a24d","ssdeep":"1536:iMq3GUEqPKA95ObYs/A7dHRvK5yCmeUALrwDjo:iMqCOKT+dxQyCwDjo","tlshash":"ab5301e1f05c6c585ba7cafb59e19e9d38336a7a7fb401b0867b622824f206c1f501c6","first_seen":"2025-10-04T05:11:03.391761Z","last_seen":"2025-10-04T22:06:20.990379Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1161,"timings":{"blocked":1132,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/locales/en.png","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/locales/en.png HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=YURsT9CwjiuslMow; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyOTU3MiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Qt9aeEvku9zHns78; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 1751\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: \"68df7ca2-6d7\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1751,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"4cd1cdce1c1f2c0290a2b686aefd5ddf","sha1":"250db2d70a924c49b0ac1c1a3668bc1737267069","sha256":"3d2348697a12ab3e497f215c2920a6f738a058c599429cad719e36adc4eaf61e","sha512":"ec34b4ba528679e4fbbf3a4022ed5127f89186291036d8ebef5c0781353efa89bdbb24cdd006656160a85a7dfcfe000458d7ffbfe4ca2c13e4558189d583b197","ssdeep":"","tlshash":"79311dcfc46897c980e782392ac6d3954a399ce0449bf58698150264370ae57575dd0b","first_seen":"2025-08-09T06:39:58.901689Z","last_seen":"2026-06-26T20:23:29.901851Z","times_seen":108,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/ext/google/recaptcha/api.js?render=explicit","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /ext/google/recaptcha/api.js?render=explicit HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=7fW6f4jk6U5hq5yD; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OFHDbLsRgv2wz1ZL; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: br\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: private, max-age=300, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Sat, 04 Oct 2025 22:05:28 GMT, 0\r\nservice-worker-allowed: off\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1019,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1019), with no line terminators","md5":"0b536bf8341b9ddd054dc252fdb4221b","sha1":"32746a7636865259071992e8b96dc24242ae5e7e","sha256":"6659a13d4bfb02f73f9cb288e269dcece47de251bf82e4724078e0585fe64254","sha512":"4b2b662f14da571a0e32b9b4cb6077ed427fae68de7af6551304dc43ab191ab6af7dfdbda29ec5d3da158f4d32c38d0d39cb22091024ee2b538dba167728a6bd","ssdeep":"","tlshash":"ed1102731a14e0394b3209e1e2ffcb75e492701cf15845e8a515dac42e79dcbce05589","first_seen":"2025-10-02T05:22:43.534294Z","last_seen":"2025-10-07T18:16:30.149112Z","times_seen":255,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/Spinomenal2/f7b227e6c36f58e56398a43edaff34dac728307c.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/Spinomenal2/f7b227e6c36f58e56398a43edaff34dac728307c.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 37782\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"6d86b116cbb1596ad799a0d0a40d991f\"\r\nlast-modified: Wed, 04 Jun 2025 07:36:27 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 185D50DEDC878C7C\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 5310\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5EPBci7ymi92XFHJ58TFKK8NfOiLBJiONVXSx6jCGaTPGw5BVx6rEMuQL%2F0Ggu1DiIxjk6orS8Rs%2FN1r9euGdOxYNNN%2F14GilOd6kyoo\"}]}\r\nCF-RAY: 989724904e636714-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37782,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"6d86b116cbb1596ad799a0d0a40d991f","sha1":"cddfe353f9319e71cfd75e0e7ac3d62d91e07bce","sha256":"cb79ae643021e4528661de291bb8cad5bfbb80f51351d26d1b75fa633b696cd2","sha512":"939b2b1508f6243ae77fcd4d7b8d96ab668534fd1bfbd2ec209e3b662035788b36e4d43871e0d856754fc9129ae8a67011db58963c677c7cc1cbeb73ca0de3cd","ssdeep":"768:cXyzKbupyDNTSrVK1euS0I3GlcVjRUXO5vjQYA8PfB97c:cXybGmrUYureGojSwLQYlfDc","tlshash":"0103f1e80b7840f37c4be380456b0900b22e69cb1bde2469e41776a350f5aca6cd2f7d","first_seen":"2025-08-09T06:39:58.984053Z","last_seen":"2026-04-05T20:02:46.677632Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1717,"timings":{"blocked":-1,"dns":1598,"connect":29,"send":0,"wait":54,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/ThreeOaks/7925d4c8b4aa44a1929abd608d1ff874.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/ThreeOaks/7925d4c8b4aa44a1929abd608d1ff874.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 35878\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"2180cf705991319ff9e63245a169e5f5\"\r\nlast-modified: Fri, 26 Jan 2024 10:04:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1850785CF61C3CD0\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 5421\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c51Uhygm%2Bs1fxRt130i7pRmGuFyWbQJUJh0xUshjoXl%2BW5hzchpPvGHGu2ltzP%2FMAzMWuVZSlawb%2BbfYCR8FbcpT%2BajRhdEjNVtpfzvc\"}]}\r\nCF-RAY: 9896e3a56c3b0ae0-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":35878,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"2180cf705991319ff9e63245a169e5f5","sha1":"09194e582590635e85096164137b7b297e2461fa","sha256":"61ddc27e8108acb7cb5c9f70106dc71b5896b1159944b19130240797caeceb08","sha512":"05098c72c6a1a4be35340f397c6f157f31f0c251b3dae030e58d3b278a959151bf078f74ffc65b8b6ff823ca85184a1e68732b18bd44b9325598970251b1da97","ssdeep":"768:ABRCN6HeNb2yE0FPMU790R8GZvl7eFfoSjuMCfGgSYpQQ:0E0HA2yNFPMU7+KGZkxoSiu7oz","tlshash":"06f202923032a0e40739865975f0b747ec9c10b1b7f74b5b54ab8266ef2c260a7a7c5f","first_seen":"2024-05-07T05:57:00Z","last_seen":"2026-07-16T16:33:15.724566Z","times_seen":51,"resource_available":false,"data":null}},"time_used":1709,"timings":{"blocked":-1,"dns":1592,"connect":28,"send":0,"wait":53,"receive":3,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/2d90c08b7b6927b4a04aa1b58f6bc336/Novomatic/5f375a8b70cf90adb23105fad61f9dd5c048ab53.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/2d90c08b7b6927b4a04aa1b58f6bc336/Novomatic/5f375a8b70cf90adb23105fad61f9dd5c048ab53.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 32989\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"6b2f4b43406cac32f2938fa7e975f145\"\r\nlast-modified: Wed, 01 Oct 2025 10:12:31 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 186AA18F300A6F1F\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: REVALIDATED\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x8UGrV%2Bq3IMTxAEVZGO3ekYEW9T66%2FAEc2QnGLO0DZnnBvuTPuC3Spm1fO1wvThnMG3pdB4D00Tho6UuaERN%2Fdiuv9xTQnT92Gxt%2FuRw\"}]}\r\nCF-RAY: 9896b42d199e9fe2-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32989,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"6b2f4b43406cac32f2938fa7e975f145","sha1":"fa78d921d23b9bf112c5c1e89573b6721c742f3b","sha256":"01c31272001e498d6d590e2e6832d492001bbad24cb21e5e23f20b0caf5d1e76","sha512":"476eb1c2c573b8e5d2f501d181a958f86d8a8e3688db801dac9b3c2f41d0b6218b46f31c28e872fe22be930d81ab1ad2b3006ae75162a37cf21b98af3a15e6b6","ssdeep":"768:QayWX4zQXv9Zpdwe8eauS9nB1yFWR9ahs2aYuro4tT:QaX8Qtdwe8PZbBR9YXaYOT","tlshash":"92e2e12c63e638521adc8ff5e16de0e5af7a6e3b512531daf0815b41228105e9d7f870","first_seen":"2025-10-04T05:11:03.28039Z","last_seen":"2025-10-04T22:06:20.945515Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1739,"timings":{"blocked":1711,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DGmbE8aB.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/DGmbE8aB.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/CkMSVCQx.js\r\nCookie: __ddg8_=vZnSJyHjLfGt1Pqf; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=qiBiWypVUf8ldfUo; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-c64\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3172,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3158)","md5":"20b9b594a9a85416120e91e583477686","sha1":"387c8bdb9affecb50168ef77d865652cc8b7ad08","sha256":"7afabad56602e84c70cf7ea7d69085fa286955e0dd555f31c1093fe00f053673","sha512":"8248e0b8796028a8b849eea7229f0e2696deccfb9fb00808999a43fc106f5c4620bab52775a3120fe289e7bd074fd08ab3841b8400cd8d79b37dd0279baa7a0a","ssdeep":"","tlshash":"b261a40ea03588bd72399cdae6bb0347232539d23ef8c4a0a11e9c177714993d292b20","first_seen":"2025-10-04T05:11:03.460447Z","last_seen":"2025-10-04T22:06:20.994768Z","times_seen":3,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CAMO0y_7.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/CAMO0y_7.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/CkMSVCQx.js\r\nCookie: __ddg8_=qvzM6DYC166LlIlJ; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=tbCOf9uAGzJb8NUH; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-41a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1050,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1049)","md5":"5aaa7ca85a8ed16e3689002c863e95a7","sha1":"694f3f2f208042403524da6a9bbc047152bd3361","sha256":"be397652c8346fd751f20d5d9e92798c2939d8f35166416520260bcb41c88745","sha512":"ea9774682a037748332b57e6e6e0a21068fa0117a4e0434ea18795ae3a4a10ae9e2085f855924b65003381626d69ca4d403906c5317bb97187f556a15f28f33d","ssdeep":"","tlshash":"c7110e9fbcd2cc7d82b21cb8c5742823138666c873fcd4e805ad0ca55a6a84b9969f13","first_seen":"2025-10-04T05:11:03.469064Z","last_seen":"2025-10-04T22:06:20.995723Z","times_seen":3,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/onlyplay.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/onlyplay.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iC014ijaFqG0RKVh; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-133f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4927,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"012276e2cb9c3b370fd12c17771e6b5d","sha1":"5ed2db80f006ca50ff52b670d42cb06e6b2e5e55","sha256":"8cfe42bb41f96fe158e5d1d6765dfc1605ae47806a46ae96c4b9c7e2232c6e0a","sha512":"7f343af282052387bcee65cab1f74ac6e921ccdaf337120783aad5ce284ce00f8ee26de8412aabb563128086060194ecb5488ea602a2acb524c7b04d79426991","ssdeep":"96:K1FIFNEWh5Hy155cIiUHoL00uMcQThxc0K06lw2KC8qU:K1OFRKGUg0NQTYhlw2KCG","tlshash":"53a164b8b3e467d0e244e7e0e616d470304a3a723fddd2a087f57e47952902d45ac9e3","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.906023Z","times_seen":69,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/ezugi.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/ezugi.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YVqugHdVRJk0j3si; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-97\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":151,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d350aa779602ab8f010dd9cf9508532","sha1":"6f2ef55fce721313446c54e72615976e87e2866b","sha256":"930e4a508eb90ec69cf46bb8e43bfe406a45302943260b101b533e0231fc7f66","sha512":"e60d3c6405734d38b979b617d4f5fe71c69c5f5d0227ae84ee8431fe8802ddbc9c3d7e8acc2e1ac0e9140533337d6e23e2f6449bfbe33c673e67fdd2a48d0521","ssdeep":"","tlshash":"f8c02b3690dc8c0ec310c120512e33c713f661d911890266f4c02b02f0207fb78c97bc","first_seen":"2024-05-07T05:57:01Z","last_seen":"2026-04-15T02:03:05.91567Z","times_seen":68,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/redrake.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/redrake.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=MV9TuE09o8DYWwcW; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-474\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1140,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"447cdedbee546eaf230b81d11581f336","sha1":"1cd455621f752221114a784a0a099b068a66d605","sha256":"2d6319c433d15fe63757b80aa5a1fe4e272bf055a7c501ea4b75c243664d2c91","sha512":"0f7a8e4042bd770b50ff5ef9b02d83a6f23f4f3c93e0758003d072747d26a2cae3c13d893c92f04a54d4176307d663b8e7bb006d599999d65572861ec8cb06c2","ssdeep":"","tlshash":"6e2133e7f7cd42fea401e7f0d106ac78332b34b57a21cead13cc2824728604dc8a4402","first_seen":"2023-10-28T21:30:08Z","last_seen":"2026-04-15T02:03:05.934997Z","times_seen":68,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":181,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/tPdbiW_V.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/tPdbiW_V.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=007COD25tAJiNYB8; __ddg10_=1759615532; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=xoLtMD3mLm1ELGGK; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-c0\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 5\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 121\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":192,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"af7805d42f0e94d87c24a603905aa544","sha1":"7b8e20de9b8033988fd4fb49ae5214be2a1b317e","sha256":"67962a43b72e5541bff19a54203273e73fa6a40aef2c34b20da51c95817d336f","sha512":"4f5b71fae1dbed1ca64d3290836d4ee5f28885ca526c71eaccbad91c58ee45a25d2a2e847846f68d8e02509d5c833f84c2e7a9928991b0418953cbe3dc954732","ssdeep":"","tlshash":"07c01285d8202077cc607828a1d20f42027e3644e115d17c77fc2482f470565a4aec65","first_seen":"2024-05-07T05:56:57Z","last_seen":"2026-01-21T08:18:56.877435Z","times_seen":55,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":225,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/BgUJLoS-.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/BgUJLoS-.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=xoLtMD3mLm1ELGGK; __ddg10_=1759615532; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=6X1GNuUMNJPkXai1; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-adf\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 5\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 1004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2783,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2716)","md5":"3d2c02d74f4c0768d16385c23713a8c0","sha1":"1e2f8b6a1650552df13bd17f73f349846209ee3c","sha256":"8512dcb0a79df73db990833caf165aab1438ff109b77ddd32e991b8b0a69adff","sha512":"7ac5308be49ee81fff510e3d24e13ac74a8a6d69821206891d8e8a82542370041a96fb5012228d6288aa1c3892b3b4d6ee558d608c84817a858b19611b3b74ef","ssdeep":"","tlshash":"4f51421e7eda54310b2a2830e09714a3a009dad11c1dc721b9204d9d79b1d96cdb3fef","first_seen":"2025-10-04T05:11:03.439288Z","last_seen":"2025-10-07T18:16:30.141403Z","times_seen":8,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/Jv8jlA-BQE5JD6rA-h_iqNH2/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /recaptcha/releases/Jv8jlA-BQE5JD6rA-h_iqNH2/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 349597\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Oct 2025 00:59:26 GMT\r\nexpires: Sun, 04 Oct 2026 00:59:26 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 29 Sep 2025 12:04:53 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 75962\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":820265,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (611)","md5":"79d46b9e2a42785f28f64082a61eabbf","sha1":"c1b66a198b40bcd1f6cce34704173f997ecd8608","sha256":"6159c42218db471f012088abd52e60fe39e5c1dcf2981ff7d80f38d8bd36a690","sha512":"820943d8b4d684933ce756b9d59c499147aae8336a811b042d8ee8bf035ecb20be12ff815d0ba4a8676c815b9e6bf2d687591d434bedfbbf07e56dae34f39c49","ssdeep":"12288:iF/YdSVcst0yzYy0Vqqog/cT6eKb54lptHAgR1BoOdy3aWKi:QQozYJog/Y6fV4lbpR1BRdyKK","tlshash":"b70529c870257a624332b5f6707b209da36e5966d45c095d70a6c4f03fb098db0baebf","first_seen":"2025-10-01T09:12:21.067891Z","last_seen":"2026-06-02T23:59:04.965062Z","times_seen":7915,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":47,"dns":0,"connect":8,"send":0,"wait":8,"receive":33,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/6tKjJg_B.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/6tKjJg_B.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/Bej8Ac-i.js\r\nCookie: __ddg8_=ACeYYLIdSVmyOMzI; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=okhxqzG8algqbAWO; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-f28\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3880,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (3879)","md5":"407d393e15281264692188900eae8eff","sha1":"b830cf3642c39e0c6ef0ded45f8382ac840abdc7","sha256":"56d692019d86bb87b3afe063495db3d18f6706930335f5e240addb0133581a46","sha512":"2bc25c395ce1143628b18f39f869d5472fdb7165b844babca7735cadaec667efaa1d141b51554a15c93ac6e0f4b304e772748837c2b8ee76dc034375713ae708","ssdeep":"","tlshash":"2a817779b123a8f5a211c36f9e044da239cf0dfe5a55f076e0f4a480a3e6c74da4d312","first_seen":"2025-10-04T05:11:03.310242Z","last_seen":"2025-10-04T22:06:20.999565Z","times_seen":3,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/SlotsListPage.BBOrWDWR.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/SlotsListPage.BBOrWDWR.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=okhxqzG8algqbAWO; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Fmx4dMquWzTQVIPV; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-24e1\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9441,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9440)","md5":"5b41b46063a6e24f6d5f7a95b7e0ffe5","sha1":"e3bb0e0afd71e5178d60b933c69ecf22fbd95d74","sha256":"282268160e82779059785f9a7e70fe221fc02729fae126fd89d8c3e605625585","sha512":"2005c7eecbaa9a30a55c09393452e2090fa4c32bac98028127921c40ce8feb3be49fd3aaf0b0c1ad185e68e28b71a9b92a78aa78182a1f7a10754df50352e708","ssdeep":"192:qF75HTpr8y5ROBPVU2bTMhVSrNDjDC9D6WDqtzaL7lBRg8:qfHqyJDgfCxLqgz+8","tlshash":"70125121b9df2e1c3137d255e181af8e3028e723c0160beeb59a9515c987c9b6fb2099","first_seen":"2025-10-04T05:11:03.554486Z","last_seen":"2025-11-28T02:25:21.151669Z","times_seen":15,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/BcQyR81P.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/BcQyR81P.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/CkMSVCQx.js\r\nCookie: __ddg8_=okhxqzG8algqbAWO; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PRcuBjmAD5eyGUUp; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-40f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1039,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (681)","md5":"a1bb2f1c672b46e1e228db027877894f","sha1":"a00f9fe96cc653f6bc82681ab43e111bab926983","sha256":"cd73e1ba4d908d7668ad75d6f39f1638ce188ae552690210fa7dbcd6541b76ef","sha512":"b929930e4043bf2310d54d29390f0e37eece2d5496935bddaafad8a567e7bc273a244f00fb50d806f2e2ae66aedb9a12aa1e4fb28224eb4e847e96a83d44c86b","ssdeep":"","tlshash":"191121af10c48dfdb14c4ef45eb6101524d80da932ed5087c1085909833102ae259723","first_seen":"2025-10-04T05:11:03.311807Z","last_seen":"2025-10-04T22:06:21.001183Z","times_seen":3,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/pgsoft.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/pgsoft.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=8b3RfSn9Oqjj0blL; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-b19\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2841,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9c3752392106e2f24a698ff42c677c10","sha1":"9fa4438728981a8809e5dcdfc637e2a88de43127","sha256":"8ffe768b6b541118bc2297edf6b85a1003e9b9d68d1f535f67ab931b45e978c8","sha512":"98cad8f5eae13358ededd74e4cc015f90a8c26fb789ebf59789feec4af0f340cd8ab76de08ff0fcefd656c359e0a9f17ff6f82fe2907ce50e0403a79898c40af","ssdeep":"","tlshash":"fa513b3ee1cb3b9f325845349664915b9c46b06b0106211e6cd8fcb8f8c71b0ee4a9aa","first_seen":"2025-08-09T06:39:59.027853Z","last_seen":"2026-04-15T02:03:05.870747Z","times_seen":62,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/lotto_instant_win.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/lotto_instant_win.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=HsqMFJl7rGXNbvzJ; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-c49\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3145,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c6aa8bdbd5683a85dea4c14f70191e12","sha1":"a203945e31d63e787f3370eb8a8f047bb0ecadc5","sha256":"911c17212c19919c075e04a7169bafa59e69f4072e6580dfc3b8c545d0dd6e76","sha512":"aeac6e1780c3952e4ec433698e2cd7a1c93f81d76ac819e720835b874904b1e8be41c4b068e2bf31328b48daca8bb79f449c776a005b737b351f441d24e004ac","ssdeep":"","tlshash":"835172e993daa3e6e08df7b0c32b59b9325738f57920c56d47f4ac70ca5508cd48a9e0","first_seen":"2023-10-28T21:30:08Z","last_seen":"2025-12-16T06:29:49.425645Z","times_seen":26,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/loading.gif","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/loading.gif HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=YpBDTEdo6yPaouz4; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=KYrmAFoihE0kihDn; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: image/gif\r\ncontent-length: 11144\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: \"68df7ca2-2b88\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 4\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":11144,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 64 x 64","md5":"e4d96bb51227829e536412e5392bdf74","sha1":"8bf350e63f7bc86615cdccc6d16e0c8abb00584a","sha256":"d2911698581f2b0f538c0d770d1b677ecad7b9e61e99d89d1f218f9dae6c31cd","sha512":"a580b7ee3f1a213a523cc8ac69662809cd21bf0952aa2767ea1c3a8ddf934a3a34c4c578d34525d54ab027915aa9097894545713f135126bb8cf7f280b8ab0e6","ssdeep":"192:Yx1zq53A3H8YLSfEdDNsS+4tygrQFFpslGsTg1z4cWl:MH38WdDNk4Ygkrmwj5Wl","tlshash":"5a326d2c1ca447e6e927463165dba2cb8811df2d226c18d39eac347fb95b23ee0dcd10","first_seen":"2024-12-10T17:19:34.10667Z","last_seen":"2026-01-21T08:18:56.850207Z","times_seen":57,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"licensing.gaming-curacao.com/validator/?lh=511aadd110f565d008810403b6cffb85\u0026template=tseal","fqdn":"licensing.gaming-curacao.com","domain":"gaming-curacao.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.486Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /validator/?lh=511aadd110f565d008810403b6cffb85\u0026template=tseal HTTP/1.1\r\nHost: licensing.gaming-curacao.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/MFIvBQPaqIuMRBBwzEUrO3K9EiKcKHe1uHeTyQyh.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/MFIvBQPaqIuMRBBwzEUrO3K9EiKcKHe1uHeTyQyh.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/webp\r\nContent-Length: 101356\r\nConnection: keep-alive\r\nlast-modified: Tue, 08 Apr 2025 10:00:20 GMT\r\nx-rgw-object-type: Normal\r\netag: \"a196f6d3c320c1cf6c8ae3ae7ff8b112\"\r\nx-amz-request-id: tx00000ddd399e666eee427-006867c79b-162e91d4e-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101356,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a196f6d3c320c1cf6c8ae3ae7ff8b112","sha1":"2e8c5758efc50e1e5e815d108b063e026f3db959","sha256":"fcf09059c6d39108ae64550c209602e895aedc03772dc7e1b66e7eaa9321458a","sha512":"e63f7fda240b007dac88ab159567c3747ed515f3d5ef135f8c10b20581db5cf40763eeb67002082e9238b23f039a7ea087c95b7ce20b6b1c399b22970d7ea770","ssdeep":"1536:4XQyhrzL/Juuu5E288uaUYc77LiWZU/MFcoeGYtZ+47EJTvh53aUQy70a:6Qyhcuum2maUYcuWZU/MCLr+qEr5Kb6v","tlshash":"cca302f4085f529ccac6badf48ea154670231844e79efbd0a26377b5054ee71bb93243","first_seen":"2025-08-09T06:39:58.91578Z","last_seen":"2026-03-01T21:47:53.512135Z","times_seen":32,"resource_available":false,"data":null}},"time_used":1143,"timings":{"blocked":1114,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/statsGames?limit=4","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"GET /games/casino/statsGames?limit=4 HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=qQllNVfn8COZFFqo; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg1_=Hu8FuLczOGedI2jMOup2; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 81\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: fdb7ce5f-c2f6-4578-b709-4822a655bcdd\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5726,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e7d76aefb3e2e2eaf658d40e043e3d93","sha1":"c57cc19eb23453225bc4b8261641f76904b71939","sha256":"8a1c4fdc335b0d4cc4f160c02154e4bb36f98480fa0ad48b7368e017a9b3ecd1","sha512":"2097c5b4dc51272f3342507bd96a579f2b23772db8adb05c5d603dad684cf59a836354c7948926f12d4381aa71f32b3cfdc5d1d12f50e45cf8a6af9a4c951555","ssdeep":"96:qRKv7agpR9ZQA/+9lKvWb9KR9ZQASqIL9BTb9cKvbMhqIL9BlGok4GcMruc0qocN:97f929M26vc9vLIQc91kxcZcpoc8cN","tlshash":"8ac13411a58825fb0ff26bd8dd5b7ee40ad9002741a4f567f0f1da1870e21fa351aa27","first_seen":"2025-10-04T22:06:20.787078Z","last_seen":"2025-10-04T22:06:20.787078Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/84b705dfbd5a8cf21e3ac794e96cc7549a8e8e1a.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:23:52 GMT","end":"Mon, 01 Dec 2025 06:23:51 GMT"},"fingerprint":{"sha1":"39:F5:07:29:28:16:47:DF:E2:D4:92:A0:91:58:DC:5A:1A:F0:DE:3A","sha256":"CB:03:97:8B:D1:A6:F8:60:41:45:DC:47:93:13:D9:43:1C:26:7E:6F:DA:C4:80:56:08:F3:15:3A:41:6B:B4:60"}}},"request":{"raw":"GET /games/84b705dfbd5a8cf21e3ac794e96cc7549a8e8e1a.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 29047\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1851FB8DAF06D1BC\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 5066\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2F6nrMM9IVnjQilPSX%2FocOf%2BkC%2Bur%2BEPjmQ5Mk2GK4p2NmxyJZe%2FQCW%2BZ%2FN3vPQfVxR%2B4Tk6%2BTOKMfpingHavo7mOD%2FVf5HEE4zqpVY8\"}]}\r\nCF-RAY: 98978beaeea7fff1-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29047,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"72eac6176c1bb11388a5e609856efc7b","sha1":"56e97c552ae949be8679b8587d9539cef049f93f","sha256":"81b2acd9bbfb9f3127342050e4c10e3aa03cb227fd4f2c45e043fdb3bfeaf909","sha512":"71dfebabc3ebe64a1d7f64d189ee37b036a02509e151b5ecb3d9276729db1524e292c4939951a965a4614e441cc1011bd11c82e30b699f10de18abfd4524c3a3","ssdeep":"768:uhFXNLlIdATTUtYK5Nf9Voy/5SGFs4mMxSX:UF9LlIGTUX57Vl/EYigi","tlshash":"69d2e12966e9005ebe55ead0805e6297717718c80709b6c737f8da7c9704e6840ffef8","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-07-12T17:41:43.663287Z","times_seen":67,"resource_available":false,"data":null}},"time_used":1714,"timings":{"blocked":-1,"dns":1594,"connect":29,"send":0,"wait":55,"receive":1,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/vivogaming.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/vivogaming.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=mPJVbvnzPkzeYwkc; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-3fb0\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16304,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d628100fa5d779e3b9bc129fa62172da","sha1":"f608ca7e628bb6851ce103666626b8dbeee8bd77","sha256":"3f26c9bcd48d8ed603f734858a6dcc490927aa3991bc5b2d5de26fb9bb82b632","sha512":"60c2da3dda597931491baedee8dc8d8ad2762e395f0e026ae3bbcfad216a1f0cefb951e36a372eff6396689f571c13e5221eb99ff94ac1ac7c8309d099d8887a","ssdeep":"384:sug5o71gg1u/CzY+xMQD2VOUWX/yUA3egn+1umMoHP:RLT1u/CzxxMwgOUgqUZg+1umXv","tlshash":"69724298f3e6f2a0e505f7f417299d79bf6a2cb63c23c96c0bfa0d94ea6251d4054843","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.873938Z","times_seen":80,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":183,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/middleware/mirror","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"POST /middleware/mirror HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nRegion: RU\r\nContent-Length: 25\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=IiZOTyymLzkhF8pz; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg1_=JR0MF6hZ0qNBkwa7MuFo; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 14d57513-2a28-4197-8917-ff17a5cd9705\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"28ec1eee5f4049e3c4f2135069c1d2c8","sha1":"3505519507ca1c2a089c46e100b80408ca278421","sha256":"edc48cd3b0bc4fa7ba23aad40b8508a17d370ca38be174bae2a2f64634e65a2b","sha512":"f71618e40ebaa14ab6d523a2341258c0da264b545388f8fffd14c31c64b35f94b21eb633316c4d77afcd864aade1db588ef6387ee0c4787e6f7770db0abc1183","ssdeep":"","tlshash":"f06000020000002088800a000220aa302a200a20080a0080000c30200020080800a002","first_seen":"2023-04-06T19:00:00Z","last_seen":"2026-08-15T10:40:54.815277Z","times_seen":13205,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/common","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"GET /games/casino/common HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=zsxgs6bZv92GNq9e; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg1_=JTq7RYaIgSslDb4aHnmk; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 78\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: a9c4332a-f7de-44a7-af07-0e1fda810262\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18784,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d5d6e50ce90900d80b535bf7dac5a013","sha1":"e908362c72886d023acc3019feaa76e3bbde38cb","sha256":"025cf8f13c16498d85d651365fba210d8b9f3c8309b4da9db7d366f52f073db4","sha512":"c3df57d59dedadcaca9163c801c9d295a880f134e688ee7ab52d64bbfb0ac20d694979c98bb8a47de1e885ea58959ad3f0168ee3e4b2e9b4bbd12a4cf4a39e2c","ssdeep":"384:xb449tPtNrEvyXaDvpzrdx7CDZ6sDya4g4SeK5E0bf4b63TvDo43cbmuDylI0AW4:9nz1DoqIQSLaUO+","tlshash":"6c82d02ab884e95a29331d70f917bcfaf5fe080fa8446f51ddc54e4858e277f2241ab4","first_seen":"2025-10-04T18:13:14.504514Z","last_seen":"2025-10-04T22:06:21.008513Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2042,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2042,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/3ed8f052e200ffacc81df5daabb3dbdd.png/9A9SJ939FvAzBxWJ3u77f6zz6kK0TZDXB22GoeYs.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/3ed8f052e200ffacc81df5daabb3dbdd.png/9A9SJ939FvAzBxWJ3u77f6zz6kK0TZDXB22GoeYs.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 389413\r\nConnection: keep-alive\r\nlast-modified: Fri, 08 Aug 2025 11:28:28 GMT\r\nx-rgw-object-type: Normal\r\netag: \"dfc1e7cde485f39ed62bed099577fb92\"\r\nx-amz-request-id: tx0000032403d2265db0a50-006895df5d-16cc5ab24-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":389413,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGB, non-interlaced","md5":"dfc1e7cde485f39ed62bed099577fb92","sha1":"41338b843a96ed339b2f05ddcdab689ef5e55c57","sha256":"eed87c66b015a583b521693cce9debe242b24f10c32046be5f71396a299b5482","sha512":"aa4b17917d4f78f805a0245896cf636bd69f46ac4928dffe189a5233836737e17aedb853f2cf34597aae19a39e7edf81472de9ecbdaae47f49048b4aefd5ee6d","ssdeep":"6144:P4h49ms1Ac10FBAkSIkFhG6YMwKbAlEauHrX6wi9Dot3tscPRUaY3U:P4ams6TFBtSxo6YMTbsEaI769AdXjYk","tlshash":"528423a8e468ee14482fd80c763655e2f86f12be88cdd89decfdd385cd39b50485c5a2","first_seen":"2025-08-12T21:10:07.71221Z","last_seen":"2026-01-21T08:18:57.02594Z","times_seen":28,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":387,"dns":0,"connect":0,"send":0,"wait":28,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CFzQcB0L.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/CFzQcB0L.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=8Ts3zEx2DjVR8E68; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=lvKijU7Y6LOAGRJz; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-39e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 331\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":926,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (925)","md5":"e03518ae3241e6dd395a063ba226f056","sha1":"ce8d73c397d5dc7ee93d3f441458d108201216c3","sha256":"5d716e4a24b41b70d9761f4ae2cc82b40a9e511e6cc6b8928bf37c1d61fc6ef6","sha512":"3de9e95ab046329789ed32f1404e4461988c1ce6bc41d1740d7c73cf1a87f4b802920111f593f14038981c80deb5d91190e6de0ba5f867f5b2a7d6b1062d6c60","ssdeep":"","tlshash":"3b11344e90351e9dd06ccfba806af38330609dbb2713e0597919d1a43eda4034d28f32","first_seen":"2025-10-04T05:11:03.43181Z","last_seen":"2025-10-07T18:16:30.089715Z","times_seen":8,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/api/mirror","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /api/mirror HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=iH71vJHYncPuEwkg; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=cfnpvwoQZbqnblOg; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nvary: Accept-Encoding, Origin\r\nx-request-id: 25a3b63a-893b-4b35-a515-7ad199d6efe5\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":538,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"23af90cb5bcddb3a189df6f3780a1425","sha1":"4d6675f90ff0a6578ab7cddb9b0995f17739aad1","sha256":"6c20fc53bc3f9137fee9bb3a0dd919c3eddd2b3e225ff16cee79bdb7ef0b60a0","sha512":"f576574e51e15f788f8f2d4a06488a593ac5c27210070705989611ac0c63dc801ecc3f4d69eb59b3f546fba8e57b558083b8961b0a3f74ddf6b3e66f15b0b67b","ssdeep":"","tlshash":"8af059622ea69e2c06c653c64e18bcaa96dd910b9c11acb54d849f4401f82f4613b026","first_seen":"2025-10-04T22:06:21.010871Z","last_seen":"2025-10-04T22:06:21.010871Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/locales/kz.png","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/locales/kz.png HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=YURsT9CwjiuslMow; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyOTU3MiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=KKcwLWCEmrN80kK1; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 1409\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: \"68df7ca2-581\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1409,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"7a701954e3c39e96dee200a2aa97513b","sha1":"7b814ceaeb3f31aeac0a2ee34465ff6d9f149f0c","sha256":"60b4c06718aff3b9bd2ee484a9a9148acc5a3de674f435d9975bde16da6a706c","sha512":"5ddd3dfcc9272b7f651666ac1e0865c1a49ece72f8bf25acbfea391f966823054d01bbae3c3d3b0e02c25f1f95f7a4c9c4abd205480b46dfa6e1654f6aa8b976","ssdeep":"","tlshash":"3021e9d429de0038b80ed3a7a3cf6a65fe7598d41513cc04be4de0454336ac40064b68","first_seen":"2025-08-09T06:39:58.798537Z","last_seen":"2026-06-06T23:27:45.170448Z","times_seen":113,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/currentGames","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"OPTIONS /games/casino/currentGames HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwch64x.life/\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7u4H0B1ksw7i4E9Y; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg1_=A3kiiVeEOjCmatN00xQn; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 1cb6de96-04fa-482c-8069-884bb8a1996c\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Icons.DcXG4f08.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/Icons.DcXG4f08.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=iH71vJHYncPuEwkg; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=d2it9cwx7exQZDwW; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-2ce\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 166\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":718,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (717)","md5":"676827eb558cf063ae766720cb4d5f3c","sha1":"6c2d0a4e8ef98fbc7a74a7c1dae9b16408fa75c2","sha256":"06c154b48333f56cbf15f9e7226c90ee7488ec9c4f56bbbbdadad36e0e8fab0e","sha512":"b31196631bd64a9347fd27239a4cab44535052ecabf0141d3809589851776990589ad8c9aba10c548da7ba7bb441c89e381bedb92dd81e56999311591c6916c7","ssdeep":"","tlshash":"ef01df7db65ef94b533bca0ee24c002311ea77a7dd418180228bb836b97a760381f073","first_seen":"2025-10-04T05:11:03.520159Z","last_seen":"2025-10-07T18:16:30.102849Z","times_seen":8,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/currentGames","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"OPTIONS /games/casino/currentGames HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwch64x.life/\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ycOJoqF7hGBbb6qp; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg1_=0YAPW32Aq6yJXIwXwHpv; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 9e15ce68-b9f9-4150-a7e8-5d8011ef0cfd\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/bde39d2cf80fdfda99f94a09f98ea3e7.png/QeB4EAPO8RU9bCNa9LX89tRKA0fmOT6xSArX52cM.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/bde39d2cf80fdfda99f94a09f98ea3e7.png/QeB4EAPO8RU9bCNa9LX89tRKA0fmOT6xSArX52cM.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 511082\r\nConnection: keep-alive\r\nlast-modified: Wed, 02 Apr 2025 13:57:32 GMT\r\nx-rgw-object-type: Normal\r\netag: \"92e2f4e846193281be0b1d1d77b435eb\"\r\nx-amz-request-id: tx000004a688b3b0178c2f9-00687df46d-1681c85f7-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":511082,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"92e2f4e846193281be0b1d1d77b435eb","sha1":"081cbd706f129a27843eaee07f688c3af9d06cc4","sha256":"2a23a278398c1a889eb67f7273c26937fd47f8b0b474a7bd94bc63b87fd0433b","sha512":"9e9a2d9f12df24f9a16ce8b57936e624cae68f955f16c3ec2584d24e3b1feec0fc634ab7a46505099a080055c33b357427f1858adbe2fd5d3a136df98c9ca964","ssdeep":"12288:rxmKzSxlzqAY28qx1xRWD6c2Zcf7hlBkKmKx1Ptg1R36j:rJzSzTY/q6rhlBkKm8tGAj","tlshash":"4bb42317efcbda01976f1095add359700a61645ae8f78f44f8cc8c29bf6d43206ea268","first_seen":"2025-08-09T06:39:58.792738Z","last_seen":"2026-01-21T08:18:57.013066Z","times_seen":20,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":460,"dns":0,"connect":0,"send":0,"wait":31,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DlAUqK2U.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/DlAUqK2U.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=aahDZVXUhpmvgwHw; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-5b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 5\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 82\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-08-15T10:17:47.208535Z","times_seen":25525,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Chd1ThOZ.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/Chd1ThOZ.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=xoLtMD3mLm1ELGGK; __ddg10_=1759615532; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1U1406ruXj592dYf; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg10_=1759615533; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-47f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 6\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 678\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1151,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (1142)","md5":"317a2201ef3851dba19e8b41380c8518","sha1":"69f8afc7452ae5bbffe308672417d74ea784cee0","sha256":"64cbae9ec71c97c3ca661b3a42c7f0de57972f702378830b7911e5a148b1cb0b","sha512":"4d8e02b904019b8bc965749301e7a14aa67543e54a8b2a19862be134620f94b55e7a2481c50590bf05fc5b7f6ce8e54746b77e238fa7b3a83fbaf81345be42c0","ssdeep":"","tlshash":"372130aebb3aa7bc7c245a5f42306f30f0132096ffb8945cb8d22126e3425a155640b8","first_seen":"2024-06-08T05:57:25Z","last_seen":"2026-05-26T01:50:53.816934Z","times_seen":119,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/BqzaD3Pl.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:33.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/BqzaD3Pl.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=Jb2lfTdyk0j5JPSK; __ddg10_=1759615533; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=kKmlcnbpJ53fOaBP; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg10_=1759615533; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-1fe\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 6\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 342\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":510,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (509)","md5":"48659d4240295b9e64caab349266ed60","sha1":"72d8336e72ca76db1563fac1c496ded6ff65ae3c","sha256":"127ea5b1a4a77e85a4a100e7f9301b32e1e607a2c9b3b9f714def75e098b0ab1","sha512":"4ad1491e8175e0c642a3032062dd6e2ebb251ba4c1b94e4192e4fa50688cfbf6b748d45c0433bf36af924f90c65f4bb9e35267929b16482411800a5346042745","ssdeep":"","tlshash":"e8f0c92eb1dab43543ccd8c441380c006861ad602c0e218ed19b9f13b1d07a3708bd30","first_seen":"2025-09-04T16:11:26.386239Z","last_seen":"2026-04-12T00:18:50.830483Z","times_seen":46,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/ls-cdn.amplitude/plugin-session-replay-browser-1.4.0-min.js.gz","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /ls-cdn.amplitude/plugin-session-replay-browser-1.4.0-min.js.gz HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=8Ts3zEx2DjVR8E68; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=5ukBCyNMX7Lb5JCm; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 07 Jun 2024 21:58:38 GMT\r\netag: W/\"ead49d69bc7839b0b873b096d418e1ea\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nx-amz-version-id: a9eB74QCYmN.zM7i5ckvNX3RYMk8LisI\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: AMS58-P6\r\nx-amz-cf-id: GiCn6taK8Bhs50Ma_KsWE2puP9G1p8REqit2M1da8BuQ4dWaXCKlcg==\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 36665\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126923,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c19b1b5d91c8d683b1310562d9c4a225","sha1":"4d45dcac5c6a88e10052f4e356b2170c20413441","sha256":"bb5779145f1ebdcdee053876a4ed060174dda4656978972304c79ddd5f36dac4","sha512":"3a4e8d2e8f5d9a3b45c08ce99374c149a5b67d04d016edfe6259dfbbba948a049301c0cfa5f9bf334cb93b9b4a3558cffa725c166a943c90834c8d2237a1a21c","ssdeep":"1536:Ask/3qTBpVX0Ib6vhb2pJkuppl5METErM2jnpkDtoT1JaM18PIQunrr9gltn2BE/:IqBfX046vhb2pKMQt1Jawi697w","tlshash":"4ec329deb397b033539355a980bb0101b73a6a19300d4464f62ad9ea3c7d847a277fbd","first_seen":"2025-08-09T06:39:58.991299Z","last_seen":"2026-03-24T13:49:06.781634Z","times_seen":48,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/common","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"GET /games/casino/common HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=zEc1CeVijOZQBozC; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg1_=CAsqfZbjCIbe6OgXEi2X; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 78\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 37b73213-fd9f-4a58-b6b9-e5092d4bf12f\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":18784,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d5d6e50ce90900d80b535bf7dac5a013","sha1":"e908362c72886d023acc3019feaa76e3bbde38cb","sha256":"025cf8f13c16498d85d651365fba210d8b9f3c8309b4da9db7d366f52f073db4","sha512":"c3df57d59dedadcaca9163c801c9d295a880f134e688ee7ab52d64bbfb0ac20d694979c98bb8a47de1e885ea58959ad3f0168ee3e4b2e9b4bbd12a4cf4a39e2c","ssdeep":"384:xb449tPtNrEvyXaDvpzrdx7CDZ6sDya4g4SeK5E0bf4b63TvDo43cbmuDylI0AW4:9nz1DoqIQSLaUO+","tlshash":"6c82d02ab884e95a29331d70f917bcfaf5fe080fa8446f51ddc54e4858e277f2241ab4","first_seen":"2025-10-04T18:13:14.504514Z","last_seen":"2025-10-04T22:06:21.008513Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/netgame.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/netgame.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=aRt0dlNOJsr31ZgA; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-b73\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2931,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6cdfc6dc5429074c5e070125e79a44df","sha1":"8acbdbdcd7906d983245bf7170d8d2f151463068","sha256":"c816adc9db1b1195d65773fc5d47a73db0711fa49e38e5ab5c5f4245780f76fd","sha512":"8c365afe7b3d42f9657ffdc0a1c41b6cdd52ef50c28a26668a8435b541b2ba3ec2e0a2015be92b412ec82f67106df75ec0110555ccf72ed00c6a98a7464f4d66","ssdeep":"","tlshash":"865142da734cc6e1bd80e3628b5bf839202321f4771741906b620aa56cd965f1c6eed6","first_seen":"2023-10-28T21:30:08Z","last_seen":"2026-04-15T02:03:05.843681Z","times_seen":68,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/js/fp2.min.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:26.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /js/fp2.min.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=bzfSX9mw9N9VCTPX; __ddg10_=1759615525; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=6SuBJFUPxBtbNDz0; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg10_=1759615526; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca2-883d\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":34877,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (34698)","md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssogtx01.cc/go/auth/code/check?url=aHR0cHM6Ly9nd2NoNjR4LmxpZmUv","fqdn":"ssogtx01.cc","domain":"ssogtx01.cc","tld":"cc"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-04T22:05:27.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ssogtx01.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 05:55:00 GMT","end":"Sat, 13 Dec 2025 05:54:59 GMT"},"fingerprint":{"sha1":"85:B6:FE:D4:60:19:28:2D:C7:FA:03:A6:AF:30:8D:4D:A4:C2:2D:56","sha256":"A5:B1:3F:85:4B:67:96:6E:D6:6D:B6:C5:DA:59:E5:40:9E:62:D2:47:8D:53:A5:8F:39:58:84:83:5B:D4:1C:FC"}}},"request":{"raw":"GET /go/auth/code/check?url=aHR0cHM6Ly9nd2NoNjR4LmxpZmUv HTTP/1.1\r\nHost: ssogtx01.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iKL6A8PbPYO10uIq; Domain=.ssogtx01.cc; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.ssogtx01.cc; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.ssogtx01.cc; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg1_=uu4uZZ1tcNMpYJ1a0wqp; Domain=.ssogtx01.cc; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: private, must-revalidate\r\nlocation: https://gwch64x.life/\r\npragma: no-cache\r\nexpires: -1\r\nvary: Origin, Accept-Encoding\r\nx-request-id: 97a68ca2-17d0-4c7f-8124-556bcac94985\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":404308,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":627,"timings":{"blocked":243,"dns":156,"connect":18,"send":0,"wait":140,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"ssogtx01.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"ssogtx01.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/TaNftZks.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/TaNftZks.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C72coOWc.js\r\nCookie: __ddg8_=QTv0NOnNCsLmc82E; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=DC6BJ8betOhzGdmt; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-9018\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 10237\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36888,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (36844)","md5":"b3207d6a426c185b2a7c5287a16b3b54","sha1":"ef943c31a4709da3cb206379185f4a9298596fc1","sha256":"e5961afbf67e5c460e4a76fbab2ea44d2c538589da9053ecf5ddcb80bd9f16ad","sha512":"6459689b5cdc1c610512d2f364f44c886d41e88ea43170f86b80d8c876b31bb8af2ffa391565414c9827d27b907f8c96fbb043ba29325403b4f764686892c940","ssdeep":"768:ouDRAWjwR2qMm7t58Om4uSyMUWLucH4YrjjiYHNzlchq15lDVtkIfrH5J1Le6VjT:o7eDmpiSyMUWLucH4YrTlcWRf7HuK0de","tlshash":"00f2d709e4199c3ed9b78dd878541402722d2fdfd0804d72a2fc9e155bbbd78229eb6c","first_seen":"2025-10-04T05:11:03.548498Z","last_seen":"2025-10-07T18:16:30.09333Z","times_seen":8,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/BbYtGCksAYQdPJDTYQPLx1j8uWvvJOxnyALsBpxD.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/BbYtGCksAYQdPJDTYQPLx1j8uWvvJOxnyALsBpxD.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/webp\r\nContent-Length: 236410\r\nConnection: keep-alive\r\nlast-modified: Tue, 15 Apr 2025 08:15:38 GMT\r\nx-rgw-object-type: Normal\r\netag: \"4581a5b7a04b0bec7b14d35c4c76041c\"\r\nx-amz-request-id: tx00000a06a204aad3626c4-006879fd22-1676fdcbe-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":236410,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4581a5b7a04b0bec7b14d35c4c76041c","sha1":"c0f3acef33f99bea6a0d7ac7a9868c3faf898591","sha256":"3a05178963c1df632070122b540eec32c0051b292ad9a71483e9532f37598e17","sha512":"27ab914c3d8996a84a4607a197eeebadb525c6b1bd171bd980735ebeb0c28d48c44f6219f3480d80d259d9964a102783cac37cef53bf08a7dcdf185c4666f239","ssdeep":"6144:/6fOXPxV6UtWbQ0abtjvu7MhYP5zjfH1JO6YBHPwHRdF:6cxbkbQ9g6YP5jq6YBHIHRdF","tlshash":"ef34235a0d9aeb5f53c81aa40983d6088b100a5c3d7db32b8f7a385dbd3fa548f535c2","first_seen":"2025-08-09T06:39:59.095877Z","last_seen":"2026-03-01T21:47:53.30129Z","times_seen":32,"resource_available":false,"data":null}},"time_used":1128,"timings":{"blocked":1098,"dns":0,"connect":0,"send":0,"wait":27,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Button.DTPpyI1-.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/Button.DTPpyI1-.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=9l4jof0J2NaQ6Zdg; __ddg10_=1759615530; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PNscwmz9iUAfk8Nx; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-138\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":312,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (311)","md5":"ecb5497c9d606aaba293842f9e63c4ac","sha1":"9cf5b1183d17892eff339197955134eb5967d322","sha256":"c2df52a8abdfa5e9d3546c8212b79113166c3e151ffbe2c872fec1d172939fcc","sha512":"d99d5c45bfffe0cdb84c2e92e49d34035e0adf02f955a72bbe879ca0944120c25bd0cf7f2556917a6f9d804fc702d4f7fca5cacb93a332800cd4fb23c2ca7521","ssdeep":"","tlshash":"b5e0cdb1ebc8734a3737d084b445034156635b779071364d69d173f599db452332f1a3","first_seen":"2024-05-07T05:57:01Z","last_seen":"2025-11-28T02:25:21.328929Z","times_seen":31,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/logo.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=YpBDTEdo6yPaouz4; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PI4A7Hme0mERb8lG; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-5f5\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 728\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1525,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"90c2e8c0d206d5eaeac1b5660a865926","sha1":"fe0386bf75d653fbacf2638c0dfe63544acc878b","sha256":"68da6ba7e3c1d4c39c888f4cfef2e3090ae95b091ef2b0bc1e6b638a3f2e523d","sha512":"1912a93b523c285d3ea1da9831b45240b5a6e5ddaacb2922b9b35c346beca192b37ce9881b7120fd215d1ff7087b732df496026f5bb49ae424ea1c27a0433545","ssdeep":"","tlshash":"c0315ee2b3a9d38191080f00834e7864032f15e9a710818ddbd76ba579b526fcc3d8d0","first_seen":"2024-12-10T17:19:34.101377Z","last_seen":"2026-05-26T01:50:54.168263Z","times_seen":69,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CFU304S8.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/CFU304S8.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C72coOWc.js\r\nCookie: __ddg8_=QTv0NOnNCsLmc82E; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=CJnvGZ5TpFLg2HOi; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-78\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 95\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":120,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"65b0cca89e40818f39fdd7753db6d142","sha1":"24e169a25a2e5e795d2ba4918ad600ab939bc23a","sha256":"261a0d9b3884cb4797de2dd31290199dbcec4f295a6ca9ee2c3b48ab9d9651ce","sha512":"e4c57b7230da955929c01aa05a22c6039a4ab395d6480587e21169106ce56e84aa99238c37d03c5944a72a6c799d55cc072ee59b5e498caf41fd1f6e021b43be","ssdeep":"","tlshash":"53b092d6728a3ce12602b810a15b80b4a131e6240b8a47208026f08739724a48a52e38","first_seen":"2024-12-07T17:14:43.577967Z","last_seen":"2026-08-04T09:28:00.148891Z","times_seen":102,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/flags/?v=2\u0026config=true","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"35.175.162.132","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 15 Dec 2024 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:07:A5:B7:4A:00:EA:45:09:50:EF:4B:44:63:83:38:E2:97:F8:13","sha256":"6D:1D:1C:48:82:61:EB:EF:E4:D8:57:9A:EA:F6:ED:0A:07:BB:6C:17:71:6F:A3:F1:88:57:DC:E3:A4:E8:44:96"}}},"request":{"raw":"OPTIONS /flags/?v=2\u0026config=true HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://gwch64x.life/\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Oct 2025 22:05:28 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://gwch64x.life\r\naccess-control-allow-credentials: true\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: GET,POST,OPTIONS,HEAD\r\naccess-control-allow-headers: content-type\r\nx-envoy-upstream-service-time: 0\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_ipx/f_webp,avif\u0026densities_1,2,3/img/home/home-coinflip.webp","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_ipx/f_webp,avif\u0026densities_1,2,3/img/home/home-coinflip.webp HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=axWMToMevviSY80o; __ddg10_=1759615530; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyOTU3MiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=UEuB7KKclcUCGgB4; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\ncontent-type: image/webp\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests;, default-src 'none'\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\ncache-control: max-age=60, public, s-maxage=60\r\netag: \"8a94-TQ2c3vUPt5b9+6NXji3fVi2pqcA\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35476,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0012955decadf7f351dcd95b1acc3ca6","sha1":"4d0d9cdef50fb796fdfba3578e2ddf562da9a9c0","sha256":"64b3ce9b8e7117a79656e0307dcf1d919699c6a567bcf286c9c367c125878975","sha512":"d75a7f623e3b6eaf27ddfa6ad2e6fdc7c3a11bff8bd3b715854ebdf84a1e4f773f67ea73741dd4aa981498a84252cfa397d1860a4ee8f342e10043021a518b89","ssdeep":"768:kMQWbtGgfYTcaCNHN6g1u/hoa9nuxfytgsMZ9+mNWJ03wM4Rv+mQ:VQeeAaCNt6g1u/udx1z3+/e3wMuG","tlshash":"0bf2f1a05e599fac4862e127d9a3497483016f6cd0efe29788e4b9c8db1305db69288d","first_seen":"2025-08-09T06:39:58.978777Z","last_seen":"2026-03-01T21:47:53.460203Z","times_seen":34,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/habanero.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/habanero.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=oRBCBUyzqMv0lRBn; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-1150\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4432,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ddad478ea5ebbdb655251c9c30837098","sha1":"7cde431a9cae5937b46ba7ef2824b71cc52925e8","sha256":"eec76f6c2dd79a72c753dc39a8214f7e6764fd896864f55b29f4a025e9a2ad56","sha512":"92b6cfc0fc40759f23cf2cc638c1748b86bc0d0875ebbcf5aca8d6aaa251f26974299a3a441467bae902fa9e53d269a85cd9c3977a313f5378b7c95c55df6ba8","ssdeep":"96:/VStVZWkO1J3+PbBjdAs8YhsliWaDn3RYKohMLn4t+tdqlG:/gtVZuJw6s82stE3RYiLnFgQ","tlshash":"f69155fbe6d888e2e287c7f8c644987871fa24fe7a52c2da41e07e9e25300dd054c9d1","first_seen":"2023-10-28T21:30:08Z","last_seen":"2026-04-15T02:03:05.906679Z","times_seen":69,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":183,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/BgUJLoS-.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/BgUJLoS-.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=8Ts3zEx2DjVR8E68; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=aPK2Zga2g8tVm1Rw; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-adf\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 1004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2783,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2716)","md5":"3d2c02d74f4c0768d16385c23713a8c0","sha1":"1e2f8b6a1650552df13bd17f73f349846209ee3c","sha256":"8512dcb0a79df73db990833caf165aab1438ff109b77ddd32e991b8b0a69adff","sha512":"7ac5308be49ee81fff510e3d24e13ac74a8a6d69821206891d8e8a82542370041a96fb5012228d6288aa1c3892b3b4d6ee558d608c84817a858b19611b3b74ef","ssdeep":"","tlshash":"4f51421e7eda54310b2a2830e09714a3a009dad11c1dc721b9204d9d79b1d96cdb3fef","first_seen":"2025-10-04T05:11:03.439288Z","last_seen":"2025-10-07T18:16:30.141403Z","times_seen":8,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Index.DjeSHR9Z.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/Index.DjeSHR9Z.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=YURsT9CwjiuslMow; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyOTU3MiUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=prFN4BjHdqEumvBz; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-13e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":318,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (317)","md5":"47f876f6777238b8fef6cab0e88a190e","sha1":"12350007296b859405aa99e5085540122bd66179","sha256":"752176faf7991d0fce63e67af84fa4b45ae51d72c966b866abf842e2a8783856","sha512":"7e02bc91f6c2b8b6a2bbeec518678e9858fe7d4b84db9a4105be070201876c68f42a3c25130faaff9cff2e29a18052db4afbcaa044eed268a685f286c89ea06b","ssdeep":"","tlshash":"e9e07d31388c509dc8ebe2697619495c0e1ef2abef3f49190875a0651cd7d44233a444","first_seen":"2025-08-19T01:32:32.305939Z","last_seen":"2026-03-01T21:47:53.436256Z","times_seen":31,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/CjIjlGq-.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:33.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/CjIjlGq-.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=6X1GNuUMNJPkXai1; __ddg10_=1759615532; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NnIgnvb0mQpyd4V0; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg10_=1759615533; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-9ce4\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 6\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 13011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":40164,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"8536f2f542c30c3b37aa68fa9d57f5cb","sha1":"4679e0eb2b374266ccf64bfc73ac98dad5143a1d","sha256":"84a0b743a7ef37e6cd2a2db660b4b5899c3fecce9d1f28502709614fc9d191fa","sha512":"126dd430ac683507fae1c2a1e11c5ff94a9015441798342ca77791fe29709b30c33f8b30ff1b10b1f08b51fac27d016fed4b2f8e724afb82dd8b57c2fbc7fbfd","ssdeep":"768:kC43aMGeQtDCPB/HyzE0qct7yxP2C7dSlSxkPut06BcftOashQWEhQEq/iiB8faZ:760xiywcV64IX","tlshash":"e303f8c8b2a0506583e2a1a390750203f33999153409855cbb2ceefbad7eeda7177f75","first_seen":"2025-08-19T01:32:32.322521Z","last_seen":"2026-04-26T08:04:42.226428Z","times_seen":67,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Br1FBsO3.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:27.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/Br1FBsO3.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C72coOWc.js\r\nCookie: __ddg8_=s3buOdmNGNHFp2Cg; __ddg10_=1759615527; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7fqZ96mI2mUSuoN3; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:27 GMT\n__ddg10_=1759615527; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:27 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-405\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1029,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1028)","md5":"767f58379d7921f95c8dc6c600a3df03","sha1":"13505dd414f4a7979cc3098535dd88e1e1ce193e","sha256":"fa877f9e586ac8365282757cb02e92b352649b7ee3f6cb33eb0026bb4f1c95e9","sha512":"57b4279a8e6d24ffa4bd77e6812666ea155eca8cb4fc3c1de0b42259393b937babb44298e1a70c2910ef36fbfc356c2e4aa32b36583304980a9e2f2fb98062f9","ssdeep":"","tlshash":"9611ce2bfa4a1b6263331c7646a931e6cf650b8b2c7994c43c54df261237c83e5a6f54","first_seen":"2025-10-04T05:11:03.632172Z","last_seen":"2025-10-07T18:16:30.14286Z","times_seen":8,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/common","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"OPTIONS /games/casino/common HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwch64x.life/\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fe4myk6vegiXnPxJ; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg1_=MPItmt7Y1IKchytPqn9w; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: c9bd74fc-14bb-4a1f-8ae3-b07b54c21102\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/analytics/events?event_name=time_first_load\u0026pgi=GTM-KN757LMM","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"POST /analytics/events?event_name=time_first_load\u0026pgi=GTM-KN757LMM HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 602\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=Qt9aeEvku9zHns78; __ddg10_=1759615530; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9SOgqXJNdplttzmX; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":150,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/9608ce90df8fc98075efc5535ff35f9f.png/OjAGuT337TJQJXoqI9NfPruOIfGk8mBMKwCsEGwH.jpg","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /casino/games/9608ce90df8fc98075efc5535ff35f9f.png/OjAGuT337TJQJXoqI9NfPruOIfGk8mBMKwCsEGwH.jpg HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 46831\r\nConnection: keep-alive\r\nlast-modified: Fri, 02 Aug 2024 09:49:11 GMT\r\nx-rgw-object-type: Normal\r\netag: \"de82605db5c5d9b0d0c5ad27eecf03fa\"\r\nx-amz-request-id: tx00000e8b5f029de80aafa-006867c47e-162e91d26-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46831,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 610x400, components 3","md5":"de82605db5c5d9b0d0c5ad27eecf03fa","sha1":"511570e109f5d4b823e376eff632af7e4e3862e9","sha256":"4529d2cb6c5c9d0002f6cf0114cf36c40c4302d3914275a8a6920c90bad24759","sha512":"547e068accd60071532cfc2ea93bda9c696a67ae2617efd6d20f100d7ace2468a9a7b4181a20973598757701f304e060872edc639bfa177c987bf986e220f222","ssdeep":"768:kl4hEfWOPGNUbt/HKAqeXGnYx14/kDNnBQpPfOksbRuAVUWcLvz/I6rn9xVy:kgEfWDSZ/KABGYxGsDNnWZLwhUWcrNrk","tlshash":"2d230285b2da06044c98233354cd322d9df92797b9f68aec3b15b106c750da3bac674b","first_seen":"2025-03-26T02:25:21.35832Z","last_seen":"2026-04-05T20:02:46.558861Z","times_seen":56,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":319,"dns":257,"connect":28,"send":0,"wait":55,"receive":28,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/BR0LGmbo.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:33.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/BR0LGmbo.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=bMZwlZhJDGo3CdZG; __ddg10_=1759615533; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PvFSyBKWEatkOpzt; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg10_=1759615533; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-1a5\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 6\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 261\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":421,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (420)","md5":"6f2b8499fecb463aba8caa6a41f9d51f","sha1":"8d543cdc97fca1a30239569204797c44555b2569","sha256":"a93381e56863d96d377acd7917ab07625ec810a3ddb2ea1b5dd970149dbc64d9","sha512":"ecce6ab9d9b797ac5ccbf5de6ed0068e603ca0232e5bf0875d2460b5749b5baf86b3808e758fd5fd50443427d5cca0340be85a8c0b05dda6a2a13f798c2d5a8f","ssdeep":"","tlshash":"34e02b0eb814c1b2a1679de8c171252216147dad73a4b1c2818f562157251aea14eb16","first_seen":"2025-10-04T05:11:03.462592Z","last_seen":"2025-10-07T05:14:26.653197Z","times_seen":7,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/espressogames.png","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:33.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/espressogames.png HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=AH6tK4UH4DvHKtfd; __ddg10_=1759615532; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.231; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=foZ2rvSp0eAXwQvR; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg10_=1759615533; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 1296\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: \"68df7ca2-510\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1296,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit colormap, non-interlaced","md5":"3ace5819ac2b5d62bdd1309abd1b08cb","sha1":"b526fbb6a5bc94360fdb050ff616ca21742a4886","sha256":"403267a769888d0d63629e2a4a14bb29039ccd3f5e30dbb3d4c3ab3053388a8e","sha512":"fe228a67da3efe86aa772937c1eb34232958bb3b3e0fb4a6144ca51e07ad1b3f3669aca53aa1aabd725096a265698c5dfa48cc51b95c677cfaf3326d53e709c9","ssdeep":"","tlshash":"7221c85fe386dd0cffcc67998fe00470cf53a0734b4a9d0ab4886819a9c21976de6362","first_seen":"2025-08-09T06:39:58.926279Z","last_seen":"2026-04-15T02:03:05.965677Z","times_seen":62,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Cn9yliqE.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/Cn9yliqE.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C28Ks5WD.js\r\nCookie: __ddg8_=8Ts3zEx2DjVR8E68; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YpBDTEdo6yPaouz4; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-6d137\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":446775,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"19d5b85492f4d8505bb0d3df174e9e2e","sha1":"84b6548697aa030be332309225e873884d9f3dba","sha256":"79ce7f24d8f2fe12521d0d2ab3e1f77deec6ed8d84313c24f6b0e471532776a6","sha512":"0be04f2ec94f2b25a681d6dd3e61486c30aabe678dd82d01a56bd4a6d9fa45faae911209c277356941b283d09658258d66ebd35497c800c064db73ea06177e1c","ssdeep":"1536:kzGEyMiW9myjPH+UTrFuRSmicJ9HZBynmI0+iAFBynmI0+iA5zAGg1JxBynmI0+3:ktHPH+HFQttb40vzx8","tlshash":"6794b9e1f3a8a1ece017e7fcce26a471351a35fb3b91c5c44294ae749e221ac9d5dc81","first_seen":"2025-10-04T05:11:03.35039Z","last_seen":"2025-10-07T18:16:30.139568Z","times_seen":8,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/SoXY3eRP1IfXB59cRpbMqcKzkN53rSUcLzEOpt4o.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/SoXY3eRP1IfXB59cRpbMqcKzkN53rSUcLzEOpt4o.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/webp\r\nContent-Length: 86430\r\nConnection: keep-alive\r\nlast-modified: Fri, 11 Jul 2025 13:37:41 GMT\r\nx-rgw-object-type: Normal\r\netag: \"de426953fb9ce3964b235ef80f8a47c4\"\r\nx-amz-request-id: tx00000d3f60fe9af487fe6-00687113ae-16585b23f-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":86430,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2160x960, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"de426953fb9ce3964b235ef80f8a47c4","sha1":"f1adf189f69abf63f95bbdb781c3b1f838a7eded","sha256":"b5acfd71f35c7d6b5acddd17a37c07a69d3705918b1720a84953aadf091a7bfb","sha512":"3ac2de58f6717ce6f707036195cb004d5420ea2a43a453c0436346c12efa0d644df9102c2392fa240791ed4cd499ce329912954597ec8c10935f16013cc8221c","ssdeep":"1536:eke8Tsa0XGSh4u4XaQ1dVQxrCd3joj8ozO/Ou2LjcNzF/oEwCYMr7:/aXh4u4PLQZU3jRoi/EcRV/Jv","tlshash":"85831212408f928ea4abd174987ffc647e73c86bfd61ce56279947612f24c3688d1b32","first_seen":"2025-08-09T06:39:58.960037Z","last_seen":"2026-03-01T21:47:53.325757Z","times_seen":32,"resource_available":false,"data":null}},"time_used":1140,"timings":{"blocked":1112,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch64x.life/games/casino/currentGames","fqdn":"api.gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch64x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 Aug 2025 13:08:15 GMT","end":"Thu, 27 Nov 2025 13:08:14 GMT"},"fingerprint":{"sha1":"3D:4E:9A:EB:D7:78:D2:B2:E9:35:59:AA:85:FF:27:91:4A:9D:2C:71","sha256":"16:3A:6C:B3:10:60:8B:1A:95:05:C8:EC:46:56:ED:D8:25:7A:6B:04:E6:08:52:F1:0E:87:5B:49:5B:80:AB:F3"}}},"request":{"raw":"GET /games/casino/currentGames HTTP/1.1\r\nHost: api.gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=wXDY4keMdmr7qiWa; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg10_=1759615530; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:30 GMT\n__ddg1_=UvxGmX3GSMVezHz3gqc9; Domain=.gwch64x.life; HttpOnly; Path=/; Expires=Sun, 04-Oct-2026 22:05:30 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Sat, 04 Oct 2025 22:05:30 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 82\r\naccess-control-allow-origin: https://gwch64x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 7ddbbd90-94d3-4d14-91fd-bedf307c149f\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1500,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fa91901bc4acca1398db5887d552592a","sha1":"91954b773fc196e8a8c8a33875e2d509da178b9d","sha256":"ec9d26bca05d99bc7897a3aeb8c6be9772cd63f98d3b50919721c453645c53d7","sha512":"9397da6e831d3eee965156a0bf6e035330ea01c95a6cd690061c0b8be0a908362968fdc89b9312725b9ab1898fd339888e25801e4f1584bdd09474166a14f729","ssdeep":"","tlshash":"2731dee9f6ac1cedc50446a04e0f7ad9a4cc753b23864e925adfec2682809e76441637","first_seen":"2025-10-04T22:06:20.823368Z","last_seen":"2025-10-04T22:06:20.823368Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/bonuses.QNhvQ_f2.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/bonuses.QNhvQ_f2.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=9l4jof0J2NaQ6Zdg; __ddg10_=1759615530; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PoeV0Ald0VCvU5Tj; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-5f79\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24441,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (24440)","md5":"9d6c77ea1fadc7c36431ac8fd68175ec","sha1":"fee69407272730cb316248d7d4c4eff7085049be","sha256":"1586e1c6d399db51883249e78b1d92ae8f286e294d715f3130cabf06843e04c4","sha512":"11ffe46288b504eac288e81871468195e451477d912c38f29b3292c3f2720df53555d2f435738bf6685dad9868501d167c6dc95bdbfd7803a20b350d572fccac","ssdeep":"384:pDHUUUjlt97PLvgBt+olcwcTRByP45MZWMipaxO:10Ukp7kwyP4GWMipuO","tlshash":"20b23f31742d6468f03bd6dab4d42a98391d770795438fabee656869cacf0f33632348","first_seen":"2025-10-04T05:11:03.2387Z","last_seen":"2025-10-04T22:06:21.028002Z","times_seen":3,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/BG1pC2vj.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/BG1pC2vj.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/Bej8Ac-i.js\r\nCookie: __ddg8_=ACeYYLIdSVmyOMzI; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=QKePnBTwd8UAtAzz; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-14a5\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5285,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (5284)","md5":"2fd19b28d6e444b5c053c57ae7461306","sha1":"90404b4b4a6f6a7d21c237f7551a26b9bfb1bfd4","sha256":"d34a9fcf1115873f31f12a21be9ec320c3012b6529adcb557d0332f38136a8dc","sha512":"74854d976471449f8d9a514c7897eabd51d9d5587d4cf2dd97b3360668717a7da17a16d8018dbb188c7ced2243a4ef1bad3f05db08ebd574a948a48cda395eb4","ssdeep":"96:NieSyTsFvwmBocgjI3Y0Pmn/6MjNZDht0+cxxV8i05rZC:NieSyTauUobdfF5FC","tlshash":"a4b15418e868cdb6d152415d9c0b14d079dd3eadc475e435e4f869902bbac3ca28d72e","first_seen":"2025-10-04T05:11:03.471664Z","last_seen":"2025-10-04T22:06:21.029026Z","times_seen":3,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/betting.CUT8dU1d.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/betting.CUT8dU1d.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=okhxqzG8algqbAWO; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=vZnSJyHjLfGt1Pqf; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-1cd\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":461,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"9bbc45c79f9e266d30d20647c8a99f78","sha1":"60cfc2fe12c431ebfdb4309230905f2e3a9a743b","sha256":"61e66b46d98d385e28dc177ca26979bdd2ccfb6eb383294f3fbac6ad26e9ed2b","sha512":"45c019e21c12bc4c7f80b9d071a58bd3c5d21a116c397d9cf83aab32c8b85a5766dee75488fea11276d9a5111277869668c6bdc6d36f8744a669c30d26fb51ad","ssdeep":"","tlshash":"03f05c651a2df179c37ba00d91c2ea4e772ad14272163af50e1fe4176d8e5c26f250c1","first_seen":"2025-10-04T05:11:03.296376Z","last_seen":"2025-10-09T10:23:07.195949Z","times_seen":4,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Card.Cy-l_ghe.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/Card.Cy-l_ghe.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=9l4jof0J2NaQ6Zdg; __ddg10_=1759615530; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FlRwQHisya001C8y; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-124f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4687,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4686)","md5":"585b058c48f9aad8effd7f0806526e12","sha1":"b9db46fd5e2fda9309dcebbdc01abe77d5494a63","sha256":"302223b68c6b8059429c88f1d5da5e43910f99fc549cac6eab6bc36e1b273bb9","sha512":"007749c66ff643ef887b6d4f65dcddcab6d4ce7eadd3f3ff4c8388b801b4fe04dc1bee040e1bb3f9846eb33143985506274010929a3eca0131164802a24e14e1","ssdeep":"48:epZelKc4US1z1D31TKjf8hWNoMU60dnfnq+s7jtnWUUnCRUVVEZSVC/gVKi7dV7a:erDMbdhWBj/gixwYRVW","tlshash":"cda1ee1039b83076b5bbe4af6cc21c8f258cba17f573429a9523e464c4af44765f43d9","first_seen":"2025-08-29T06:11:20.789412Z","last_seen":"2025-11-28T02:25:21.126039Z","times_seen":19,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?en=page_view\u0026dr=gwch64x.life\u0026dl=https%3A%2F%2Fgwch64x.life%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=329420501.1759615529\u0026dt=GET-X\u0026auid=515335589.1759615528\u0026navt=n\u0026npa=1\u0026gtm=45He5a20h2v9186219929za200zd9186219929xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480709~115616986~115834636~115834638\u0026tft=1759615528933\u0026tfd=1131\u0026apve=1\u0026apvf=f","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:18 GMT","end":"Mon, 08 Dec 2025 08:34:17 GMT"},"fingerprint":{"sha1":"33:09:D4:D3:61:83:44:73:CF:04:5A:44:53:2E:B5:36:64:BB:FC:7F","sha256":"86:F0:16:7D:8B:24:BC:17:6C:2B:06:E6:05:A6:33:43:10:A0:61:A6:BA:81:FB:58:ED:0A:DC:0B:AE:5D:08:C6"}}},"request":{"raw":"POST /ccm/collect?en=page_view\u0026dr=gwch64x.life\u0026dl=https%3A%2F%2Fgwch64x.life%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=329420501.1759615529\u0026dt=GET-X\u0026auid=515335589.1759615528\u0026navt=n\u0026npa=1\u0026gtm=45He5a20h2v9186219929za200zd9186219929xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480709~115616986~115834636~115834638\u0026tft=1759615528933\u0026tfd=1131\u0026apve=1\u0026apvf=f HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwch64x.life/\r\nOrigin: https://gwch64x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain\r\ndate: Sat, 04 Oct 2025 22:05:32 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://gwch64x.life\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T10:46:18.4937Z","times_seen":17901663,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Icons.DcXG4f08.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/Icons.DcXG4f08.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=de1rt2sehPwC2fte; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-2ce\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 5\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 166\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":718,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (717)","md5":"676827eb558cf063ae766720cb4d5f3c","sha1":"6c2d0a4e8ef98fbc7a74a7c1dae9b16408fa75c2","sha256":"06c154b48333f56cbf15f9e7226c90ee7488ec9c4f56bbbbdadad36e0e8fab0e","sha512":"b31196631bd64a9347fd27239a4cab44535052ecabf0141d3809589851776990589ad8c9aba10c548da7ba7bb441c89e381bedb92dd81e56999311591c6916c7","ssdeep":"","tlshash":"ef01df7db65ef94b533bca0ee24c002311ea77a7dd418180228bb836b97a760381f073","first_seen":"2025-10-04T05:11:03.520159Z","last_seen":"2025-10-07T18:16:30.102849Z","times_seen":8,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/providers/kagaming.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:32.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/providers/kagaming.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=VXyFehQ6mTXRNBzM; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=E84MRGuiUrbMTfFB; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg10_=1759615532; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:32 GMT\nuserVersion=45.10.240.143; Max-Age=86400; Path=/\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:33 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3864,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"f9bc9f0b50c4720d23b7073393347994","sha1":"3af7a97a5920cf50d96107da3eee7cde205c3882","sha256":"4c8d13254c9620e0d1dfaf23652c6829800c21a7ab654f1a3e18c9053010c14b","sha512":"8986ac343180eb877ad94a4533b2f7c3dafab0feaddfe9088a711cbcea7e679d98880c614be0eb27422b2ae960a64d28de6dfa75bf6bce49b8139497db05c10b","ssdeep":"","tlshash":"fc8111ca01a71121a603a46a2bef060171948807e54bec127edd33cccfcb69897e378d","first_seen":"2025-08-29T06:11:20.964489Z","last_seen":"2025-10-09T10:23:07.278451Z","times_seen":8,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":164,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/Home.puxSNRNF.css","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:26.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/Home.puxSNRNF.css HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nCookie: __ddg8_=ZD147zRyhIzGWfmm; __ddg10_=1759615526; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=zr5PwypbvBGJUaHN; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg10_=1759615526; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:26 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-7b70\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":31600,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (31599)","md5":"f54b3d372981eeb830226b2cac6589f8","sha1":"5b32f6d7e1051ff1b13ef9ea8ef930004026f974","sha256":"702d9e1a9127a29bbf7a76f83f5239bb9bbef44c0f8382b79f13a38e5cd63681","sha512":"6d226b5103d1ac7895a65ec95731c3535e1f7850ce9e6c9e50c0fce4224413bd964e485e4c5ce1c686a466b23727d11d32dd712b9823a07289388c8fb030bed6","ssdeep":"384:7c9CVetr9K8r9TETMutXaYHsYCsk7JWGCIEw5+22xI:+CVl+9gT5sYCxl2xI","tlshash":"5de29931671c202db1bbe676b8e16a9d6118f507e72317b9d5d47438c8db682323aacc","first_seen":"2025-10-04T05:11:03.609866Z","last_seen":"2025-10-07T18:16:30.052681Z","times_seen":8,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/DlAUqK2U.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/DlAUqK2U.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C72coOWc.js\r\nCookie: __ddg8_=QTv0NOnNCsLmc82E; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=icLuZVa36iPWomTV; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\netag: W/\"68df7ca1-5b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 82\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-08-15T10:17:47.208535Z","times_seen":25525,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/zVFskexI.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:28.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/zVFskexI.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/C72coOWc.js\r\nCookie: __ddg8_=QTv0NOnNCsLmc82E; __ddg10_=1759615528; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g0$t1759615528$j60$l0$h0; _ga=GA1.1.1117425898.1759615528\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=HfJmqFL26laXuKxG; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg10_=1759615528; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-132e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 1867\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4910,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4909)","md5":"5ea5cccdf7fe73c144e70d799815d49a","sha1":"81bb06b30d93384c5161e2b6f8071ae99233346c","sha256":"ff9b0b00de6e591e7358f950969ab47c64969182cc7735d0f953a7fe2d85a70f","sha512":"48ae4ccbf48d353d4436238f7163e488638ee29f4049ba15a4ca4258a89a4609afb9d9563b4cdc56d88e7cb1d6e45c1d915309015410d38f6f716a35ddb961d2","ssdeep":"96:/SI0Lgam5pFjwsmyzqVBRJzxv7A28/s1/HEwYx+3cCL:/8mjsyGRFThSu/j4U","tlshash":"0fa1858f1240762e7ded4b5543f4681883304886fc1c27edf4ae5d389b5a88f61bb674","first_seen":"2025-10-04T05:11:03.358433Z","last_seen":"2025-10-07T18:16:30.125287Z","times_seen":8,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/img/home/play-icon.svg","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:29.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /img/home/play-icon.svg HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/Home.puxSNRNF.css\r\nCookie: __ddg8_=3cSQAEPVUoQw1bC3; __ddg10_=1759615529; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615529$j59$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUyODg2MCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=z8wYp0tHklXn5Lr8; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg10_=1759615529; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 03 Oct 2025 07:34:58 GMT\r\netag: W/\"68df7ca2-564\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1380,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"89eda723c8dba836950c26b67cd04524","sha1":"9f3e34d6eb95f2e0b5fc9da99bc3928d70302684","sha256":"6d7e4782409131c0723e253d83d2849be4634cbefdf9d2ae6c5ad0cec9b08a32","sha512":"bc29d80eb47fc508f60d1e6aa660bea59af4ac72c608fb52c4b11b18712da727706b0029a25bb58d525e2031e9b69bb0f12664dae2514b85a222281d605c1768","ssdeep":"","tlshash":"b621823cd25c5c7bdb67827cda195465221e13de63c9431c7198df1e18344cb690fae4","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-04-15T02:03:05.921793Z","times_seen":79,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/vkGFNfXPWz6kGmJuVFqHZz60Jn1PJvYqaQ0CaeRm.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:30.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:23:41 GMT","end":"Sun, 30 Nov 2025 06:23:40 GMT"},"fingerprint":{"sha1":"E7:8F:30:D7:F8:1E:DC:F5:17:E8:A4:E5:BB:17:BB:88:33:41:99:D1","sha256":"1D:11:EE:1F:98:5B:17:C7:E6:87:D5:1F:19:56:85:7E:D6:77:C6:42:FB:04:C5:77:E9:3C:AC:F7:73:DA:6E:DB"}}},"request":{"raw":"GET /banners/vkGFNfXPWz6kGmJuVFqHZz60Jn1PJvYqaQ0CaeRm.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Oct 2025 22:05:31 GMT\r\nContent-Type: image/webp\r\nContent-Length: 83666\r\nConnection: keep-alive\r\nlast-modified: Mon, 16 Jun 2025 16:57:30 GMT\r\nx-rgw-object-type: Normal\r\netag: \"f3d5d70dd5d6a4e1d27a75ad21088cde\"\r\nx-amz-request-id: tx0000038c0dc591881fa3c-006867c79b-162e91d58-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83666,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2880x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f3d5d70dd5d6a4e1d27a75ad21088cde","sha1":"c0ea3b56ebaa1edadda97f7d57800d57ef66d4c1","sha256":"6fc0c0defe0cc85bcfeff16dc58e880b4b91abb81a668f99793b796fbd76e0c2","sha512":"53306d2be770126c46e6b3260badd757e026f38d7e602cccc9c86fcf074a2c47777c0bf0a50edb6620e1736600cc8d7f5faab3b69afca5e9bb60c575523864c0","ssdeep":"1536:eI0BIWfA2r7S+6bexDC9Hh+UfGeZYVfC2Woud189mDydlbBY4AVV:0bfzuvUDC9HY7tUDm9v1HM","tlshash":"20830208fa761d070bd214f69934b1eae5a124fbeff655187456b4f82119da0b03ecc7","first_seen":"2025-08-09T06:39:59.056033Z","last_seen":"2026-01-21T08:18:56.837454Z","times_seen":30,"resource_available":false,"data":null}},"time_used":1143,"timings":{"blocked":1114,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwch64x.life/_nuxt/WmOt8kDh.js","fqdn":"gwch64x.life","domain":"gwch64x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwch64x.life/","date":"2025-10-04T22:05:31.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch64x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 06:16:49 GMT","end":"Wed, 15 Oct 2025 06:16:48 GMT"},"fingerprint":{"sha1":"C8:A6:EE:68:05:59:5C:BC:EA:5B:F6:23:EE:1D:F0:17:AC:E9:8B:48","sha256":"43:5B:FF:0F:8D:0B:32:65:72:3C:57:E5:DB:7C:B3:FD:E6:6C:95:C5:7A:AF:0E:AE:35:4B:41:3C:6F:A2:9E:9E"}}},"request":{"raw":"GET /_nuxt/WmOt8kDh.js HTTP/1.1\r\nHost: gwch64x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwch64x.life/_nuxt/CkMSVCQx.js\r\nCookie: __ddg8_=qvzM6DYC166LlIlJ; __ddg10_=1759615531; __ddg9_=82.148.169.64; __ddg1_=PwjVluYMnsf82WiYGvoz; i18n_redirected=en; userVersion=45.10.240.51; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.515335589.1759615528; _ga_VRDLWS0SHC=GS2.1.s1759615528$o1$g1$t1759615530$j58$l0$h0; _ga=GA1.1.1117425898.1759615528; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI5MjNhOWU3OS0wYTJiLTQ4YzMtYTU1Ny01MGJiM2JiYjBhMTUlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU5NjE1NTI4ODU1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1OTYxNTUzMDMwNCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; ajs_anonymous_id=965ded0f-0e74-4133-a047-f75a68401012; welcomePackTimestamp=1760220329\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=yqd3XMVaGq9tvSYq; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg10_=1759615531; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\n__ddg9_=82.148.169.64; Domain=.gwch64x.life; Path=/; Expires=Sat, 04-Oct-2025 22:25:31 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 04 Oct 2025 22:05:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 07:34:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68df7ca1-c3d5\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":50133,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (50088)","md5":"c0d5b56935a1c83ae13d43f179dcf983","sha1":"7aae7190f0678918bb4bc9a63477574da131da3f","sha256":"f18df94a2909a1fcfe5919f070b080a001ad8892089a8011296f95bd6c4381dd","sha512":"db3174cbda9f638887081c8e2b22992b6edfea44c265c250b2e742e850ad175854d90718fed5a3da022ccd641e2abb471797cafddb84e2eb6b21cc2b9241888b","ssdeep":"1536:UUG5TbxDYbVIFD5oz53e7yKAXgwlzS1ERHwH3H3:UFbqbVIFFoz5u7PJEg","tlshash":"be332aeeb06ce5f5c17383c4989a5450bb2d3ff96a4000d691f90e64af5c4b86fb8d64","first_seen":"2025-10-04T05:11:03.668192Z","last_seen":"2025-10-04T22:06:21.036906Z","times_seen":3,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}