diff --git a/TEST_STAND/buck0/main.tf b/TEST_STAND/buck0/main.tf
index 668d177..65a0d84 100644
--- a/TEST_STAND/buck0/main.tf
+++ b/TEST_STAND/buck0/main.tf
@@ -2,7 +2,7 @@ terraform {
   required_providers {
     nubes = {
       source  = "terra.k8c.ru/nubes-test/nubes"
-      version = "5.0.63"
+      version = "5.0.64"
     }
   }
 }
diff --git a/universal_rebuild/internal/provider/provider.go b/universal_rebuild/internal/provider/provider.go
index 3a44649..61c2da9 100644
--- a/universal_rebuild/internal/provider/provider.go
+++ b/universal_rebuild/internal/provider/provider.go
@@ -127,8 +127,8 @@ func (p *NubesProvider) Configure(ctx context.Context, req provider.ConfigureReq
 	transport.TLSHandshakeTimeout = 60 * time.Second
 	transport.ForceAttemptHTTP2 = false
 
-	// utls: маскируем Go TLS под Chrome, чтобы пройти DDoS-Guard (JA3 fingerprint).
-	// Стандартный crypto/tls блокируется на deck-api-*.ngcloud.ru.
+	// utls: маскируем Go TLS под Firefox, чтобы пройти DDoS-Guard (JA3 fingerprint).
+	// Стандартный crypto/tls и Chrome блокируются на deck-api-*.ngcloud.ru.
 	transport.DialTLSContext = func(ctx context.Context, network, addr string) (net.Conn, error) {
 		dialer := &net.Dialer{Timeout: 30 * time.Second}
 		conn, err := dialer.DialContext(ctx, network, addr)
@@ -140,8 +140,7 @@ func (p *NubesProvider) Configure(ctx context.Context, req provider.ConfigureReq
 			ServerName:         host,
 			InsecureSkipVerify: insecureSkipVerify,
 			MinVersion:         tls.VersionTLS12,
-			NextProtos:         []string{"http/1.1"},
-		}, utls.HelloChrome_120)
+		}, utls.HelloFirefox_120)
 		if err := uconn.HandshakeContext(ctx); err != nil {
 			conn.Close()
 			return nil, err
diff --git a/universal_rebuild/main.go b/universal_rebuild/main.go
index 6708984..4ccbbba 100644
--- a/universal_rebuild/main.go
+++ b/universal_rebuild/main.go
@@ -10,7 +10,7 @@ import (
 )
 
 var (
-	version string = "5.0.63"
+	version string = "5.0.64"
 )
 
 func main() {