{"report_id":"21ca6a2d-829e-48b9-9b74-ae12e1d7cb80","version":6,"status":"done","tags":[],"date":"2025-08-02T12:32:32Z","url":{"schema":"http","addr":"9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"ip":{"addr":"104.21.96.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"title":"Watch The Institute 2025 S01E04 VOSTFR 1080p WEB H264 LUCKY Wawacity diy mkv"},"submit":{"url":{"schema":"http","addr":"9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"ip":{"addr":"104.21.96.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-06T12:32:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-02T12:31:57Z","timestamp":1754137917,"ip_dst":{"addr":"172.18.0.18","port":35294,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"94.242.236.140","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-08-02T12:31:57.341208+0000\",\"flow_id\":1236278506772569,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"94.242.236.140\",\"src_port\":443,\"dest_ip\":\"172.18.0.18\",\"dest_port\":35294,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=monodonng.cfd\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL RSA Domain Secure Site CA\",\"serial\":\"00:90:D5:9E:04:9D:A2:BA:43:13:E3:88:E2:07:BF:1E:B1\",\"fingerprint\":\"40:f5:b4:3a:17:08:9f:66:b9:d3:c3:b0:34:39:13:ca:c3:ef:d7:9c\",\"sni\":\"monodonng.cfd\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-08-02T00:00:00\",\"notafter\":\"2025-10-31T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"76fd782f81a37e6b32ec21bbc9fb4c00\",\"string\":\"771,47,0-65281-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1455,\"bytes_toclient\":4008,\"start\":\"2025-08-02T12:31:57.284761+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ab1.9xbud.com","ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-11-14","domain_rank":0,"first_seen":"2022-06-20T16:18:41Z","last_seen":"2025-07-30T11:49:22.302633Z","alert_count":0,"request_count":4,"received_data":8246,"sent_data":2763,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.23","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"9xbuddy.in","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-10-29","domain_rank":61181,"first_seen":"2019-10-29T18:17:47Z","last_seen":"2025-07-26T05:45:01.143858Z","alert_count":0,"request_count":14,"received_data":508940,"sent_data":6829,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.23","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"monodonng.cfd","ip":{"addr":"94.242.236.140","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":1875,"sent_data":1365,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-02T12:31:57Z","timestamp":1754137917,"ip_dst":{"addr":"172.18.0.18","port":35294,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"94.242.236.140","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-08-02T12:31:57.341208+0000\",\"flow_id\":1236278506772569,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"94.242.236.140\",\"src_port\":443,\"dest_ip\":\"172.18.0.18\",\"dest_port\":35294,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=monodonng.cfd\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL RSA Domain Secure Site CA\",\"serial\":\"00:90:D5:9E:04:9D:A2:BA:43:13:E3:88:E2:07:BF:1E:B1\",\"fingerprint\":\"40:f5:b4:3a:17:08:9f:66:b9:d3:c3:b0:34:39:13:ca:c3:ef:d7:9c\",\"sni\":\"monodonng.cfd\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-08-02T00:00:00\",\"notafter\":\"2025-10-31T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"76fd782f81a37e6b32ec21bbc9fb4c00\",\"string\":\"771,47,0-65281-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1455,\"bytes_toclient\":4008,\"start\":\"2025-08-02T12:31:57.284761+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"9xbuddy.in/build/341.0ae41371bd7ead4356ae.js","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28448f30c3130e962a7859f48cc5946d","sha1":"0868e7e65b76acfa06977b1c00a7f6f50b89f7cc","sha256":"64569107973d30087cd8dac0e51250931ad5512dd7906bbb9b67cd9647a30729","sha512":"3945f10cd8a97e8d352779d100a9491d517b2fd15c23cc1d58a1dee85caf2f7bf444d0e736dfa10c4dcec1db4eb76510c4e8de43929ef7ff5bff7b845d9122c1","ssdeep":"192:dXoW150ZoB327TyEP+Pl2lC1K6IZ1ciHPNWmi5IU1xl19xC9vRp9KqM0ni1E4F7K:jTqev4Hl2DIWOigsO","tlshash":"6c02d65aa1229ab63753a590fec35183f40100adcea045d0f45dc2aeefecc596b13edb","size":8432,"data":"","first_seen":"2025-07-09T19:03:48.779786Z","last_seen":"2025-12-22T05:12:51.310546Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9xbuddy.in/build/151.0ae41371bd7ead4356ae.js","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44023d15c08bfdf24aeb4d2a24b6e463","sha1":"a9633d83c0b550dbf4ae8bdcc800b3338f84d666","sha256":"a97a9ce5f6c078d2b8c9c48ea782ca3e74c4e91386c6180caec9fec1a045f248","sha512":"a997f2f5db16f5252b9466cb51d090971f26541fdefd6a54276b937e4cc237ee24e28820685d024fe0f7681d52f28559ab1d5dc9840519dc43fbba1760ef71cf","ssdeep":"384:t5NLeeItgvmkWyX9+WOU8pefIZ5xo+mtN49k3RDYSMW1yjZFZXU0Nr:tXeHSvWOeRpe5+x9+mJfx","tlshash":"1e92f9c9b9a0b0b107a721f4c06f580bf3765539a44d84a0fb51e8e62c7990ed73bf99","size":20982,"data":"","first_seen":"2024-12-20T15:25:21.493875Z","last_seen":"2026-03-25T09:53:45.478276Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9xbuddy.in/build/585.0ae41371bd7ead4356ae.js","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ad650557931a0b2eb60a61a9439f92e","sha1":"efc64461ca295e9f726e90de2f50fbb8fe4616cf","sha256":"8188bc0012b513e493b19383e8d7e9e0057721a48035c14bbe9a4234062756ec","sha512":"cb50b6705e8feff5659078000adc6458e88123bc05cb99e59a67ff392e8a9549cd871219dc2fccdcddf1c467b583bcd067ac7ba9a9fb99bdf5ff3a8c071e38ad","ssdeep":"384:loNWqu4ezWeG4RDu0e9hiOgfFy+NKWnMhaMcM48yf5lLQt0RoLTkRcRTmg7Q:Ckr48HGWu0ShinU+7MgMOlstaC8","tlshash":"c3a2076cb28728687bb31475e42f690971aa5605ca0f84f4f53bece11e24ecbb503f94","size":22283,"data":"","first_seen":"2025-07-09T19:03:48.771237Z","last_seen":"2025-09-05T12:30:32.540318Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"163f619711e6ee17c5e38602e8d54552","sha1":"0e97bc588db53bf1cde7672807e6b9cf20c79aa6","sha256":"95169e6f6743273a80c683b0261034f92f2ea2246a6cbd84877862acbd0ec4a8","sha512":"b37a93e3593c1c4cd0ff3a23ca64f7f3e36164fa2d77e989794513c12d36c649fc02ef3648d99d657c2cec3df67c87ddf68099ae253754d882cec6d907b80f27","ssdeep":"192:/DQ1hOc7/f/dogeVZqLCl2Ms3AEXKW150ZoB307TyEP+Pp2lC1K6IZtciHPNHi5L:/+VxT4ev4bb21IWGUGsZp","tlshash":"8132864a62319ebb37479590bdc72182f014009edde40994e45dc6aeefac8193a13bef","size":11944,"data":"","first_seen":"2025-08-02T12:32:37.093928Z","last_seen":"2025-08-02T12:32:37.093928Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9xbuddy.in/build/main.0ae41371bd7ead4356ae.js","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"90d419b889d672a4c49b86f13c2155be","sha1":"2721c84b23086cd5f3309ea46747529f9adc6bb4","sha256":"7d80c7ece8b9735af55a9a26f8dcde5c6b22ae42fc10cff926438f8bf4aeda9e","sha512":"f4ca8b79715576181fabd45e792c094c2a27f58b83a05fe1eb2138700168b3017a4926e03f74ee8d3efb448e8c0f6df77bc039e5b1aa8bd478536f5389d20e41","ssdeep":"3072:nAG82/iORs8ed4hYWyRsPmiCKTcoJev7uDo44PTbSpX9ViEosfAfHS3LD:nAG82/iOMXW4s+3KT32u04RLD","tlshash":"da642ad87596f1b55bb301b2407f140ab33d2a1b780d8960f221f8d978b889ea17bf5d","size":335709,"data":"","first_seen":"2025-07-09T19:03:48.778933Z","last_seen":"2025-09-05T12:30:32.519937Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9xbuddy.in/build/615.0ae41371bd7ead4356ae.js","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10bf5d785d606dde43d93a4ded4c8ea3","sha1":"9bfb5a12fdc804b828000f2425a6c0bf794a8818","sha256":"fe6f9655d1bec5a625e1094413736e3c40933456b9136f416896ead3bdec4ace","sha512":"26631f74a8415397491bd397905114eca7f06d0fb37b3ec98c1991fd4a84438602274b241c1c669975ed58caf448989076989372e049eb70f303f4bc54677967","ssdeep":"","tlshash":"5751d8dc9b2094dd3ac443ebaf1084b4589fe97dba34471ae02cc56410b301c96b9c96","size":2944,"data":"","first_seen":"2024-12-20T15:25:21.501316Z","last_seen":"2026-03-08T11:27:29.068661Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9xbuddy.in/build/403.0ae41371bd7ead4356ae.js","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e64d3de34943dd5f2d5874dbf28e293","sha1":"53348dcaff0907ae769df3187e45d86d9bf0b6f2","sha256":"d39c2acef624f155bbbc9768177a0bdd9ee7a3560ce35abb5f6267a74a8f80dc","sha512":"28bcacd408145bd40caff3f302fb222857f7d613b97236bafcb4800c2b8768de074fbfdd91fd8865691035bcb0c685f1573752c0b45bad89f2eaaaabc1c73bd2","ssdeep":"768:b+Xu8TKdVj2kRauFVChZjquhSftR/bE+sDpSd/UlIv7+LChRMKgq:au88VjbGlfaiY/UlIvSOD","tlshash":"7903d84cf1a279acaa9344bae42f850db42f6a44c78f84dcf525b5940c689c9fd03fd9","size":40035,"data":"","first_seen":"2025-07-09T19:03:48.780736Z","last_seen":"2025-12-28T03:30:33.902992Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"monodonng.cfd/rHH727qVeN4r6/7972","fqdn":"monodonng.cfd","domain":"monodonng.cfd","tld":"cfd"},"ip":{"addr":"94.242.236.140","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","size":5,"data":"","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-06-22T00:16:07.601032Z","times_seen":18680,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"monodonng.cfd/1clkn/9537","fqdn":"monodonng.cfd","domain":"monodonng.cfd","tld":"cfd"},"ip":{"addr":"94.242.236.140","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9082dc37e5e8046929da411544ad071a","sha1":"41e0e3963ed94e59e8a2f115994c382712411537","sha256":"b7848d86edc8dc3b5bc6a5c666069f9a31e000cee51575d3b6083951607e1550","sha512":"8c7a47aba28936b7fb4083892dfc8643afe90452d6cc789f5f8562ebeb253000ba0dc23f35af988b9288afa32d701fd8c3e95f9b0966f3789dc269f393f6b039","ssdeep":"","tlshash":"714000000000000000000000f00000000000000000000c00c000000000000000000000","size":6,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-06-21T12:47:41.708677Z","times_seen":16327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ab1.9xbud.com/token","fqdn":"ab1.9xbud.com","domain":"9xbud.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","date":"2025-08-02T12:31:56.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9xbud.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Jun 2025 08:32:42 GMT","end":"Fri, 12 Sep 2025 09:30:26 GMT"},"fingerprint":{"sha1":"F3:3E:CA:4C:84:99:62:95:75:9B:50:1B:25:27:D6:33:13:4F:1B:33","sha256":"34:40:8D:E1:B6:23:88:AC:05:6F:6D:A6:11:3A:FA:F5:E7:BB:D1:E7:89:C7:8C:8B:A5:11:C7:60:F4:5A:C4:9B"}}},"request":{"raw":"POST /token HTTP/1.1\r\nHost: ab1.9xbud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json; charset=UTF-8\r\nX-Requested-With: xmlhttprequest\r\nx-auth-token: ad3Dq5mXrZLK05zFmGZqZ5WVypiUx5JtaGRoycKVY6XMfWeAhYHbyIO0s4iOkoGltaqWra+QhYKFk6ywfrOilYl4gLDAvoa52pOsl5WtlpNj2NaapGBllY+WZZmTYmVkX2k=\r\nx-requested-domain: 9xbuddy.in\r\nx-access-token: false\r\nContent-Length: 2\r\nOrigin: https://9xbuddy.in\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9xbuddy.in/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 Aug 2025 12:31:56 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.23\r\naccess-control-allow-origin: https://9xbuddy.in\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\naccess-control-max-age: 1728000\r\naccess-control-allow-headers: content-type,x-requested-with,x-auth-token,x-requested-domain,x-access-token\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FPJXFUT1rkE6vL7Ec9nD88N8%2F%2FtQCmcNv8ufPzz92zkLZm%2BX1jzndqWGNvUxPM022Byg3FsIs0DJTbWmf7Y92tMHWN5TpQh7%2BeqM\"}]}\r\ncf-ray: 968d985a1bf1569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.23","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":120,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a3bc42946ede68f73837114bf7d20974","sha1":"c00955901cf49c75a9dc007f4d8071f1f8798afd","sha256":"dd5ee09c452a6bdc4a42ca09813142259c83ab4059f83f582d7de16a6d28e4dd","sha512":"22c7741158674289fd89d56f014ec26c8093a813e606ef315b2a4d532c0caa21bfb75b6f94fa63be85d327a655ffa838eadb87ada24cfaa7f691e4b671f66e10","ssdeep":"","tlshash":"01b02b0bd15307311de38402851395d0684d0ae040ab81c4786e013005c40491d37526","first_seen":"2025-08-02T12:32:37.070471Z","last_seen":"2025-08-02T12:32:37.070471Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9xbuddy.in/build/bddcb5cd2357411ec12c.png","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","date":"2025-08-02T12:31:56.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9xbuddy.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 15:53:48 GMT","end":"Thu, 16 Oct 2025 16:52:35 GMT"},"fingerprint":{"sha1":"C3:5D:7D:EC:7C:5D:87:A0:27:CB:AD:8F:47:AB:A4:84:8A:A9:9C:13","sha256":"5D:C3:CE:64:36:6F:14:9F:89:AC:F3:D4:C3:F7:1C:9B:ED:13:92:8D:4F:CE:62:86:9C:72:88:78:67:CF:09:09"}}},"request":{"raw":"GET /build/bddcb5cd2357411ec12c.png HTTP/1.1\r\nHost: 9xbuddy.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T02:29:52.920518Z","times_seen":16623839,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ab1.9xbud.com/token","fqdn":"ab1.9xbud.com","domain":"9xbud.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","date":"2025-08-02T12:31:56.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9xbud.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Jun 2025 08:32:42 GMT","end":"Fri, 12 Sep 2025 09:30:26 GMT"},"fingerprint":{"sha1":"F3:3E:CA:4C:84:99:62:95:75:9B:50:1B:25:27:D6:33:13:4F:1B:33","sha256":"34:40:8D:E1:B6:23:88:AC:05:6F:6D:A6:11:3A:FA:F5:E7:BB:D1:E7:89:C7:8C:8B:A5:11:C7:60:F4:5A:C4:9B"}}},"request":{"raw":"OPTIONS /token HTTP/1.1\r\nHost: ab1.9xbud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-access-token,x-auth-token,x-requested-domain,x-requested-with\r\nReferer: https://9xbuddy.in/\r\nOrigin: https://9xbuddy.in\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 Aug 2025 12:31:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.23\r\naccess-control-allow-origin: https://9xbuddy.in\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\naccess-control-max-age: 1728000\r\naccess-control-allow-headers: content-type,x-requested-with,x-auth-token,x-requested-domain,x-access-token\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uQZ63PKqJXQxNf8ztypHJmAIJfgwi2tlEF4zknQe4ERfBpKsF8iDIZYyBrQjw3Q7OLSWZs8QXU5dxgzDcuFK1jyw%2FI7%2FyvCVBNgk\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 968d98593af5569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.23","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T02:29:52.920518Z","times_seen":16623839,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":37,"dns":4,"connect":3,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9xbuddy.in/build/291f13891176f90733ca.png","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","date":"2025-08-02T12:31:55.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9xbuddy.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 15:53:48 GMT","end":"Thu, 16 Oct 2025 16:52:35 GMT"},"fingerprint":{"sha1":"C3:5D:7D:EC:7C:5D:87:A0:27:CB:AD:8F:47:AB:A4:84:8A:A9:9C:13","sha256":"5D:C3:CE:64:36:6F:14:9F:89:AC:F3:D4:C3:F7:1C:9B:ED:13:92:8D:4F:CE:62:86:9C:72:88:78:67:CF:09:09"}}},"request":{"raw":"GET /build/291f13891176f90733ca.png HTTP/1.1\r\nHost: 9xbuddy.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 Aug 2025 12:31:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2501\r\nserver: cloudflare\r\nlast-modified: Sun, 06 Nov 2022 06:05:05 GMT\r\netag: \"63674e91-9c5\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\naccept-ranges: bytes\r\nage: 2110\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kDDwigywPMwqB2eKvWyzVDb3GNFiXXZ%2BmB%2BD1Ge53Mau5KZqKNtcooiebg6jECx%2B91po6jB7Ne2PbB%2F8HnGHSLxcbXMnl379\"}]}\r\ncf-ray: 968d9856aa1a56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2501,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 217 x 55, 8-bit colormap, non-interlaced","md5":"f19a76e1de03a1ecb9c45dcfb96bce41","sha1":"2156ba7ed189b2f22b87e87eb9ffcaa7ebb4db0c","sha256":"55340830b75351b2ad4154871c488f34c0b66c8cef18719f3f7a8f9dc190cd58","sha512":"27336c9195d642f2f06a7421cdbbba75aa411e5f0078c1d4f7f00755413b8fa3f9ae44c2f7ccfb69c16870b87ba08374c405af72484bbc747eb4da57a8cfe56c","ssdeep":"","tlshash":"14513b96e31b2a34d5eb0e1942f3717699004c6d010e9243f8e548b284e3eeee9ff527","first_seen":"2023-05-06T00:29:08Z","last_seen":"2026-06-02T21:26:34.319386Z","times_seen":287,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9xbuddy.in/build/341.0ae41371bd7ead4356ae.js","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","date":"2025-08-02T12:31:56.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9xbuddy.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 15:53:48 GMT","end":"Thu, 16 Oct 2025 16:52:35 GMT"},"fingerprint":{"sha1":"C3:5D:7D:EC:7C:5D:87:A0:27:CB:AD:8F:47:AB:A4:84:8A:A9:9C:13","sha256":"5D:C3:CE:64:36:6F:14:9F:89:AC:F3:D4:C3:F7:1C:9B:ED:13:92:8D:4F:CE:62:86:9C:72:88:78:67:CF:09:09"}}},"request":{"raw":"GET /build/341.0ae41371bd7ead4356ae.js HTTP/1.1\r\nHost: 9xbuddy.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 12:31:56 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tieOE2WEEmPvYcDKK35Vf8rGRq6HxXM47dpN7L9cUTWA6T73I4IS%2FVyq5K1HpwgmR%2FvTRGNknKvKUG%2BAj21j3AVYFnvbbOCYYDP288fWy4C1wFO7OSnWFX9xno6P\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 09 Jul 2025 13:27:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"686e6e2e-20f0\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\nage: 2110\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 968d9857cf675693-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4296\u0026min_rtt=652\u0026rtt_var=4882\u0026sent=177\u0026recv=248\u0026lost=0\u0026retrans=0\u0026sent_bytes=14091\u0026recv_bytes=13703\u0026delivery_rate=558860\u0026ss_exit_cwnd=14905\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=c9100d39d2beae3a\u0026ts=439\u0026inflight_dur=53\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8432,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8432), with no line terminators","md5":"28448f30c3130e962a7859f48cc5946d","sha1":"0868e7e65b76acfa06977b1c00a7f6f50b89f7cc","sha256":"64569107973d30087cd8dac0e51250931ad5512dd7906bbb9b67cd9647a30729","sha512":"3945f10cd8a97e8d352779d100a9491d517b2fd15c23cc1d58a1dee85caf2f7bf444d0e736dfa10c4dcec1db4eb76510c4e8de43929ef7ff5bff7b845d9122c1","ssdeep":"192:dXoW150ZoB327TyEP+Pl2lC1K6IZ1ciHPNWmi5IU1xl19xC9vRp9KqM0ni1E4F7K:jTqev4Hl2DIWOigsO","tlshash":"6c02d65aa1229ab63753a590fec35183f40100adcea045d0f45dc2aeefecc596b13edb","first_seen":"2025-07-09T19:03:48.779786Z","last_seen":"2025-12-22T05:12:51.310546Z","times_seen":73,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9xbuddy.in/icons/favicon-16x16.png","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","date":"2025-08-02T12:31:56.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9xbuddy.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 15:53:48 GMT","end":"Thu, 16 Oct 2025 16:52:35 GMT"},"fingerprint":{"sha1":"C3:5D:7D:EC:7C:5D:87:A0:27:CB:AD:8F:47:AB:A4:84:8A:A9:9C:13","sha256":"5D:C3:CE:64:36:6F:14:9F:89:AC:F3:D4:C3:F7:1C:9B:ED:13:92:8D:4F:CE:62:86:9C:72:88:78:67:CF:09:09"}}},"request":{"raw":"GET /icons/favicon-16x16.png HTTP/1.1\r\nHost: 9xbuddy.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 12:31:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 680\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=X9VnJBbdL5kpQspiXIVVrISTaWN89PXr9fBhtdtL%2BHyexMlUN8WusQAYHsJIbHD2wc5PIvVGczPHJRY%2FM%2Ft0kzKLra%2Fkgitjtme%2FMAQkaEE9af5J60lfKMMY%2FJzl\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sun, 06 Nov 2022 06:05:05 GMT\r\netag: \"63674e91-2a8\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\naccept-ranges: bytes\r\nage: 2110\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: 968d98582f6c5693-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3189\u0026min_rtt=652\u0026rtt_var=3062\u0026sent=188\u0026recv=254\u0026lost=0\u0026retrans=0\u0026sent_bytes=24168\u0026recv_bytes=14518\u0026delivery_rate=960241\u0026ss_exit_cwnd=14905\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=c9100d39d2beae3a\u0026ts=495\u0026inflight_dur=88\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":680,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"f310dc4b30e94e078aa3d8ce14a93a7d","sha1":"f6b2f0419a8bb65aafd4c185079584494439cf4a","sha256":"5261947833061f72396f2e0f6b27598ae37585d8de6da4bed8df9f683181aaab","sha512":"43bdab50e7354fc52df0bd3f04e1eb22484bfd18c147c108239a3a6934a5970a777abd6b4e2da8e14a9c6468be953b09c98da76d8c1ee6f56b021b8f44b99215","ssdeep":"","tlshash":"04014ec2f1b0f6f4eca77d12099a3b8af828852a3080180aa801d1558828bc0262afc3","first_seen":"2023-05-06T00:29:09Z","last_seen":"2026-06-02T21:26:34.297622Z","times_seen":285,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9xbuddy.in/build/615.0ae41371bd7ead4356ae.js","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","date":"2025-08-02T12:31:56.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9xbuddy.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 15:53:48 GMT","end":"Thu, 16 Oct 2025 16:52:35 GMT"},"fingerprint":{"sha1":"C3:5D:7D:EC:7C:5D:87:A0:27:CB:AD:8F:47:AB:A4:84:8A:A9:9C:13","sha256":"5D:C3:CE:64:36:6F:14:9F:89:AC:F3:D4:C3:F7:1C:9B:ED:13:92:8D:4F:CE:62:86:9C:72:88:78:67:CF:09:09"}}},"request":{"raw":"GET /build/615.0ae41371bd7ead4356ae.js HTTP/1.1\r\nHost: 9xbuddy.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 12:31:56 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=C3yw4o5MHXaJeQRBmwjoPs4VqqXs3Zcs1IFCWCd%2BnR4y9q2eb4RMgwPiaqakM0OWU777W3pfAIOgUf4YJp6xZKUc6oA%2BpuLWQs0uRuz07OdcUjtSfLYDw7LQBIbU\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 09 Jul 2025 13:27:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"686e6e2e-b80\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\nage: 2110\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 968d98587f715693-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2095\u0026min_rtt=0\u0026rtt_var=2522\u0026sent=201\u0026recv=262\u0026lost=0\u0026retrans=0\u0026sent_bytes=34485\u0026recv_bytes=15865\u0026delivery_rate=1689287\u0026ss_exit_cwnd=14905\u0026ss_exit_reason=2\u0026cwnd=17783\u0026unsent_bytes=0\u0026cid=c9100d39d2beae3a\u0026ts=544\u0026inflight_dur=95\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2944,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2578)","md5":"10bf5d785d606dde43d93a4ded4c8ea3","sha1":"9bfb5a12fdc804b828000f2425a6c0bf794a8818","sha256":"fe6f9655d1bec5a625e1094413736e3c40933456b9136f416896ead3bdec4ace","sha512":"26631f74a8415397491bd397905114eca7f06d0fb37b3ec98c1991fd4a84438602274b241c1c669975ed58caf448989076989372e049eb70f303f4bc54677967","ssdeep":"","tlshash":"5751d8dc9b2094dd3ac443ebaf1084b4589fe97dba34471ae02cc56410b301c96b9c96","first_seen":"2024-12-20T15:25:21.501316Z","last_seen":"2026-03-08T11:27:29.068661Z","times_seen":144,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9xbuddy.in/build/151.0ae41371bd7ead4356ae.js","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","date":"2025-08-02T12:31:56.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9xbuddy.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 15:53:48 GMT","end":"Thu, 16 Oct 2025 16:52:35 GMT"},"fingerprint":{"sha1":"C3:5D:7D:EC:7C:5D:87:A0:27:CB:AD:8F:47:AB:A4:84:8A:A9:9C:13","sha256":"5D:C3:CE:64:36:6F:14:9F:89:AC:F3:D4:C3:F7:1C:9B:ED:13:92:8D:4F:CE:62:86:9C:72:88:78:67:CF:09:09"}}},"request":{"raw":"GET /build/151.0ae41371bd7ead4356ae.js HTTP/1.1\r\nHost: 9xbuddy.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 12:31:56 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AkWCsFVm%2FILIeUGnZWiDRI5V0GECJAl%2Bxg2Ez5CynF1Hb%2FsmMniHSkSADh4QP3opM5Y76D9UqhePXrimHIgsWiLCTVZ4hVtRpewe%2FoLGDXYdsg2t3%2FhO0TXjDbwg\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 09 Jul 2025 13:27:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"686e6e2e-51f6\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\nage: 2110\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 968d98586f705693-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2951\u0026min_rtt=652\u0026rtt_var=2771\u0026sent=194\u0026recv=259\u0026lost=0\u0026retrans=0\u0026sent_bytes=25764\u0026recv_bytes=15733\u0026delivery_rate=960241\u0026ss_exit_cwnd=14905\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=c9100d39d2beae3a\u0026ts=537\u0026inflight_dur=91\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20982,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20982), with no line terminators","md5":"44023d15c08bfdf24aeb4d2a24b6e463","sha1":"a9633d83c0b550dbf4ae8bdcc800b3338f84d666","sha256":"a97a9ce5f6c078d2b8c9c48ea782ca3e74c4e91386c6180caec9fec1a045f248","sha512":"a997f2f5db16f5252b9466cb51d090971f26541fdefd6a54276b937e4cc237ee24e28820685d024fe0f7681d52f28559ab1d5dc9840519dc43fbba1760ef71cf","ssdeep":"384:t5NLeeItgvmkWyX9+WOU8pefIZ5xo+mtN49k3RDYSMW1yjZFZXU0Nr:tXeHSvWOeRpe5+x9+mJfx","tlshash":"1e92f9c9b9a0b0b107a721f4c06f580bf3765539a44d84a0fb51e8e62c7990ed73bf99","first_seen":"2024-12-20T15:25:21.493875Z","last_seen":"2026-03-25T09:53:45.478276Z","times_seen":152,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9xbuddy.in/build/403.0ae41371bd7ead4356ae.js","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","date":"2025-08-02T12:31:56.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9xbuddy.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 15:53:48 GMT","end":"Thu, 16 Oct 2025 16:52:35 GMT"},"fingerprint":{"sha1":"C3:5D:7D:EC:7C:5D:87:A0:27:CB:AD:8F:47:AB:A4:84:8A:A9:9C:13","sha256":"5D:C3:CE:64:36:6F:14:9F:89:AC:F3:D4:C3:F7:1C:9B:ED:13:92:8D:4F:CE:62:86:9C:72:88:78:67:CF:09:09"}}},"request":{"raw":"GET /build/403.0ae41371bd7ead4356ae.js HTTP/1.1\r\nHost: 9xbuddy.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 12:31:56 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=t%2FVPEIp8Nl%2Bi6YOovBgC20US1sSbdYlOX%2FgFLpjjNlQgpCIQ9HLbV9r30eRxsAGWEIj4o2LTYON6s7m99Vpipvt9jZHRoZcd%2BgujkgennpfVM%2BbCDeEpqQCO7Qb%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 09 Jul 2025 13:27:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"686e6e2e-9c63\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\nage: 2110\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 968d98587f755693-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1345\u0026min_rtt=0\u0026rtt_var=1817\u0026sent=211\u0026recv=267\u0026lost=0\u0026retrans=0\u0026sent_bytes=45428\u0026recv_bytes=16366\u0026delivery_rate=2517750\u0026ss_exit_cwnd=14905\u0026ss_exit_reason=2\u0026cwnd=17846\u0026unsent_bytes=0\u0026cid=c9100d39d2beae3a\u0026ts=573\u0026inflight_dur=101\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40035,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40035), with no line terminators","md5":"3e64d3de34943dd5f2d5874dbf28e293","sha1":"53348dcaff0907ae769df3187e45d86d9bf0b6f2","sha256":"d39c2acef624f155bbbc9768177a0bdd9ee7a3560ce35abb5f6267a74a8f80dc","sha512":"28bcacd408145bd40caff3f302fb222857f7d613b97236bafcb4800c2b8768de074fbfdd91fd8865691035bcb0c685f1573752c0b45bad89f2eaaaabc1c73bd2","ssdeep":"768:b+Xu8TKdVj2kRauFVChZjquhSftR/bE+sDpSd/UlIv7+LChRMKgq:au88VjbGlfaiY/UlIvSOD","tlshash":"7903d84cf1a279acaa9344bae42f850db42f6a44c78f84dcf525b5940c689c9fd03fd9","first_seen":"2025-07-09T19:03:48.780736Z","last_seen":"2025-12-28T03:30:33.902992Z","times_seen":73,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9xbuddy.in/build/bddcb5cd2357411ec12c.png","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","date":"2025-08-02T12:31:56.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9xbuddy.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 15:53:48 GMT","end":"Thu, 16 Oct 2025 16:52:35 GMT"},"fingerprint":{"sha1":"C3:5D:7D:EC:7C:5D:87:A0:27:CB:AD:8F:47:AB:A4:84:8A:A9:9C:13","sha256":"5D:C3:CE:64:36:6F:14:9F:89:AC:F3:D4:C3:F7:1C:9B:ED:13:92:8D:4F:CE:62:86:9C:72:88:78:67:CF:09:09"}}},"request":{"raw":"GET /build/bddcb5cd2357411ec12c.png HTTP/1.1\r\nHost: 9xbuddy.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 12:31:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 1351\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QZYOP4777EZH6Iu6K9ApZg3znxihmIQEoYGL%2B1C9HPtHyj8dayQcmCNbOh6OzHh1up0Xb9A%2BEWYmFz08sjuQi0Q%2FVe7NU%2BLbHfnreJRm5Tt26%2BqGjteraP7zggWw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sun, 06 Nov 2022 06:05:05 GMT\r\netag: \"63674e91-547\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 968d985befa25693-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1147\u0026min_rtt=0\u0026rtt_var=1316\u0026sent=225\u0026recv=274\u0026lost=0\u0026retrans=0\u0026sent_bytes=60364\u0026recv_bytes=17236\u0026delivery_rate=3147191\u0026ss_exit_cwnd=14905\u0026ss_exit_reason=2\u0026cwnd=17562\u0026unsent_bytes=0\u0026cid=c9100d39d2beae3a\u0026ts=1215\u0026inflight_dur=160\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1351,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 180, 8-bit colormap, non-interlaced","md5":"0c669ae648cad87524bbd2f813f19456","sha1":"c7157d3fa492f0538a94c40e78f64cdf073385ab","sha256":"be0fb81b1e6a4c784bae40dd35e460aa956802ef7a292f41fe6b973bfe9786ca","sha512":"4a4b3de5fd136953e9d323be74774ad9a078998c487ec0a3661cf6bb056dacf60de55b07ea506869cec181b3980a2cb1ba113e44c249eb2e9b6914290cd77ea2","ssdeep":"","tlshash":"ac21abe9731b7c6ac7618d55979a33e35ca1d2038123d65355e830e4585ec7ee7400db","first_seen":"2023-04-06T16:30:55Z","last_seen":"2026-03-25T09:53:45.479145Z","times_seen":48,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9xbuddy.in/build/main.0ae41371bd7ead4356ae.css","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","date":"2025-08-02T12:31:55.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9xbuddy.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 15:53:48 GMT","end":"Thu, 16 Oct 2025 16:52:35 GMT"},"fingerprint":{"sha1":"C3:5D:7D:EC:7C:5D:87:A0:27:CB:AD:8F:47:AB:A4:84:8A:A9:9C:13","sha256":"5D:C3:CE:64:36:6F:14:9F:89:AC:F3:D4:C3:F7:1C:9B:ED:13:92:8D:4F:CE:62:86:9C:72:88:78:67:CF:09:09"}}},"request":{"raw":"GET /build/main.0ae41371bd7ead4356ae.css HTTP/1.1\r\nHost: 9xbuddy.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 Aug 2025 12:31:55 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 09 Jul 2025 13:27:10 GMT\r\nvary: Accept-Encoding\r\netag: \"686e6e2e-8ae5\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\ncontent-encoding: br\r\nage: 2110\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yUgPm1Vojrkhf5Ul712shYaPcSqlNQOMBShM9HnZ24sD9JKDwym%2BhgfVzgciMqWnJpffhcrp3qsT9OnMCzWZ%2F60wp%2BmbUH3O\"}]}\r\ncf-ray: 968d9856aa1956c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35557,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (33264)","md5":"ceeffc83432c2bfc3fd829a608f8662f","sha1":"3a699176f927520268f35979870249b7625872ee","sha256":"1632c3eacda9e486ee56770f421868d753ee1607549f71225dccf6e5fed0216a","sha512":"77fceca22e92589ab5976908b5cc0cc502ce6e479f62c0f8b51babf1aa4a858431f588315a445b42923371c916ad1d0bb4ee3cfa4c7c44ec51284378e60ec341","ssdeep":"384:GHtfnm/fwUbswEd58QjxiZNiR1d1XUeIbTCL5YCKjryLHnJ:GHY/o/7sZNiR13XUeIvCLJnJ","tlshash":"a0f2515eab11042f6c1380fae294b9ece11b71c1fe2ba6ebf95315019fe13f61d92614","first_seen":"2025-07-09T19:03:48.766127Z","last_seen":"2025-09-05T12:30:32.577161Z","times_seen":55,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9xbuddy.in/build/585.0ae41371bd7ead4356ae.js","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","date":"2025-08-02T12:31:56.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9xbuddy.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 15:53:48 GMT","end":"Thu, 16 Oct 2025 16:52:35 GMT"},"fingerprint":{"sha1":"C3:5D:7D:EC:7C:5D:87:A0:27:CB:AD:8F:47:AB:A4:84:8A:A9:9C:13","sha256":"5D:C3:CE:64:36:6F:14:9F:89:AC:F3:D4:C3:F7:1C:9B:ED:13:92:8D:4F:CE:62:86:9C:72:88:78:67:CF:09:09"}}},"request":{"raw":"GET /build/585.0ae41371bd7ead4356ae.js HTTP/1.1\r\nHost: 9xbuddy.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 12:31:56 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xaByozZcqVcFe1uSO4RiXkfuxmTU4osTXARXN60Wg%2B%2Br%2B5NMevbZotcopBxWI31ewpsSXOFNu68ShPJAGBvX%2F8D%2BlRam6vu4aRswzhAEV62N7M1rgQAqnsRtAYjj\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 09 Jul 2025 13:27:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"686e6e2e-570b\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\nage: 2110\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 968d98587f745693-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1863\u0026min_rtt=0\u0026rtt_var=2357\u0026sent=204\u0026recv=264\u0026lost=0\u0026retrans=0\u0026sent_bytes=36840\u0026recv_bytes=16232\u0026delivery_rate=2014196\u0026ss_exit_cwnd=14905\u0026ss_exit_reason=2\u0026cwnd=17553\u0026unsent_bytes=0\u0026cid=c9100d39d2beae3a\u0026ts=549\u0026inflight_dur=97\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22283,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22283), with no line terminators","md5":"6ad650557931a0b2eb60a61a9439f92e","sha1":"efc64461ca295e9f726e90de2f50fbb8fe4616cf","sha256":"8188bc0012b513e493b19383e8d7e9e0057721a48035c14bbe9a4234062756ec","sha512":"cb50b6705e8feff5659078000adc6458e88123bc05cb99e59a67ff392e8a9549cd871219dc2fccdcddf1c467b583bcd067ac7ba9a9fb99bdf5ff3a8c071e38ad","ssdeep":"384:loNWqu4ezWeG4RDu0e9hiOgfFy+NKWnMhaMcM48yf5lLQt0RoLTkRcRTmg7Q:Ckr48HGWu0ShinU+7MgMOlstaC8","tlshash":"c3a2076cb28728687bb31475e42f690971aa5605ca0f84f4f53bece11e24ecbb503f94","first_seen":"2025-07-09T19:03:48.771237Z","last_seen":"2025-09-05T12:30:32.540318Z","times_seen":55,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ab1.9xbud.com/extract","fqdn":"ab1.9xbud.com","domain":"9xbud.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","date":"2025-08-02T12:31:56.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9xbud.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Jun 2025 08:32:42 GMT","end":"Fri, 12 Sep 2025 09:30:26 GMT"},"fingerprint":{"sha1":"F3:3E:CA:4C:84:99:62:95:75:9B:50:1B:25:27:D6:33:13:4F:1B:33","sha256":"34:40:8D:E1:B6:23:88:AC:05:6F:6D:A6:11:3A:FA:F5:E7:BB:D1:E7:89:C7:8C:8B:A5:11:C7:60:F4:5A:C4:9B"}}},"request":{"raw":"OPTIONS /extract HTTP/1.1\r\nHost: ab1.9xbud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-access-token,x-auth-token,x-requested-domain,x-requested-with\r\nReferer: https://9xbuddy.in/\r\nOrigin: https://9xbuddy.in\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 Aug 2025 12:31:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.23\r\naccess-control-allow-origin: https://9xbuddy.in\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\naccess-control-max-age: 1728000\r\naccess-control-allow-headers: content-type,x-requested-with,x-auth-token,x-requested-domain,x-access-token\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=A5q0l%2B81tEewL6woa1WByek3V6fYmxMY5GRF%2Bv7Cus4fww7o34%2BZDlKMpHp91YF40zRUShbWqz92QqYYrBau2qDTHEtuDzyVqXCTqb9RAARFgrsSTKDoEOToWAWua0lI\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 968d985abc9e569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=903\u0026min_rtt=423\u0026rtt_var=586\u0026sent=15\u0026recv=15\u0026lost=0\u0026retrans=0\u0026sent_bytes=4294\u0026recv_bytes=1613\u0026delivery_rate=7203980\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=3dd2d67a9dcfabda\u0026ts=326\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.23","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T02:29:52.920518Z","times_seen":16623839,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"monodonng.cfd/rHH727qVeN4r6/7972","fqdn":"monodonng.cfd","domain":"monodonng.cfd","tld":"cfd"},"ip":{"addr":"94.242.236.140","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","date":"2025-08-02T12:31:57.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"monodonng.cfd","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 02 Aug 2025 00:00:00 GMT","end":"Fri, 31 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"40:F5:B4:3A:17:08:9F:66:B9:D3:C3:B0:34:39:13:CA:C3:EF:D7:9C","sha256":"EB:2F:8C:59:EE:56:00:7F:C4:5F:AD:91:E4:E9:D7:B4:21:68:90:4A:F5:06:10:F8:B4:F2:A4:92:93:4F:C4:86"}}},"request":{"raw":"GET /rHH727qVeN4r6/7972 HTTP/1.1\r\nHost: monodonng.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9xbuddy.in/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 02 Aug 2025 12:31:57 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nAccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://9xbuddy.in\r\nAccess-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\nAccess-Control-Max-Age: 600\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nSet-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWdcFnYQDeASKQHj1xSv4SAr9g3Wh3ZQKensbE32bTH6T8TwvKB7g78kZ4Sdv8MRY13Z1U3VlPXa8GoaubZtyaLqSVc00NbiTW2%2F5sJCNcNpWbmxv9wiXmRQZOfajFpTh0am%2F5qr0oSLEg%2BFKZIhXJ5YM6WD0sZEpQkSKr4T0VRqa9JcT%2FEMbhOy5dlkql%2F0Sgd6KMD8jfZNKuGV%2BQcDKPE883N8Wbidt1l6KxEc8Gy4I%2FgtOI7c0a%2FONVNB2tfoG6EX0%2F%2F73ODxYiUTQLkdCrO07mR%2B4dk3m; expires=Sun, 03-Aug-2025 12:31:57 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwVyM0KgkAUhuE5hxiIJPjA9l6BadnCbbYMXXgFZhEDwxyZGfu5%2B2zxLp5XKcVpAjYTkrrM6yKvDnl5qkBPcNuBRwfdin8PX5AHF0ewd9h0wUrWyOzi8kes%2FgYZbM%2FWfLJe7ByNuABeWjfDzT72l%2F4KmjSBo2gGh3uqQC%2B9%2BwFe7x3U; expires=Sun, 03-Aug-2025 12:31:57 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=1\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-06-22T00:16:07.601032Z","times_seen":18680,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":106,"dns":32,"connect":18,"send":0,"wait":22,"receive":1,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"monodonng.cfd/1clkn/9537","fqdn":"monodonng.cfd","domain":"monodonng.cfd","tld":"cfd"},"ip":{"addr":"94.242.236.140","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","date":"2025-08-02T12:31:58.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"monodonng.cfd","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 02 Aug 2025 00:00:00 GMT","end":"Fri, 31 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"40:F5:B4:3A:17:08:9F:66:B9:D3:C3:B0:34:39:13:CA:C3:EF:D7:9C","sha256":"EB:2F:8C:59:EE:56:00:7F:C4:5F:AD:91:E4:E9:D7:B4:21:68:90:4A:F5:06:10:F8:B4:F2:A4:92:93:4F:C4:86"}}},"request":{"raw":"GET /1clkn/9537 HTTP/1.1\r\nHost: monodonng.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9xbuddy.in/\r\nCookie: GL_UI4=eJw9zV1OhDAcBHC%2BWdcFnYQDeASKQHj1xSv4SAr9g3Wh3ZQKensbE32bTH6T8TwvKB7g78kZ4Sdv8MRY13Z1U3VlPXa8GoaubZtyaLqSVc00NbiTW2%2F5sJCNcNpWbmxv9wiXmRQZOfajFpTh0am%2F5qr0oSLEg%2BFKZIhXJ5YM6WD0sZEpQkSKr4T0VRqa9JcT%2FEMbhOy5dlkql%2F0Sgd6KMD8jfZNKuGV%2BQcDKPE883N8Wbidt1l6KxEc8Gy4I%2FgtOI7c0a%2FONVNB2tfoG6EX0%2F%2F73ODxYiUTQLkdCrO07mR%2B4dk3m; GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjA9l6BadnCbbYMXXgFZhEDwxyZGfu5%2B2zxLp5XKcVpAjYTkrrM6yKvDnl5qkBPcNuBRwfdin8PX5AHF0ewd9h0wUrWyOzi8kes%2FgYZbM%2FWfLJe7ByNuABeWjfDzT72l%2F4KmjSBo2gGh3uqQC%2B9%2BwFe7x3U\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 02 Aug 2025 12:31:58 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nAccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=1\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"9082dc37e5e8046929da411544ad071a","sha1":"41e0e3963ed94e59e8a2f115994c382712411537","sha256":"b7848d86edc8dc3b5bc6a5c666069f9a31e000cee51575d3b6083951607e1550","sha512":"8c7a47aba28936b7fb4083892dfc8643afe90452d6cc789f5f8562ebeb253000ba0dc23f35af988b9288afa32d701fd8c3e95f9b0966f3789dc269f393f6b039","ssdeep":"","tlshash":"714000000000000000000000f00000000000000000000c00c000000000000000000000","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-06-21T12:47:41.708677Z","times_seen":16327,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9xbuddy.in/build/main.0ae41371bd7ead4356ae.js","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","date":"2025-08-02T12:31:55.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9xbuddy.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 15:53:48 GMT","end":"Thu, 16 Oct 2025 16:52:35 GMT"},"fingerprint":{"sha1":"C3:5D:7D:EC:7C:5D:87:A0:27:CB:AD:8F:47:AB:A4:84:8A:A9:9C:13","sha256":"5D:C3:CE:64:36:6F:14:9F:89:AC:F3:D4:C3:F7:1C:9B:ED:13:92:8D:4F:CE:62:86:9C:72:88:78:67:CF:09:09"}}},"request":{"raw":"GET /build/main.0ae41371bd7ead4356ae.js HTTP/1.1\r\nHost: 9xbuddy.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 Aug 2025 12:31:55 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 09 Jul 2025 13:27:10 GMT\r\nvary: Accept-Encoding\r\netag: \"686e6e2e-51f5d\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\ncontent-encoding: br\r\nage: 2110\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mBkLXfW0CYWdAXgbLCjf9NaaoyOlL3h6alkqUJf5t2lFjryYpYML8YqPMsuhd1LrpqJ8iI9SKx4XC%2FXBtrYHyp1On2%2BBTexg\"}]}\r\ncf-ray: 968d9856ba2056c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335709,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (57290)","md5":"90d419b889d672a4c49b86f13c2155be","sha1":"2721c84b23086cd5f3309ea46747529f9adc6bb4","sha256":"7d80c7ece8b9735af55a9a26f8dcde5c6b22ae42fc10cff926438f8bf4aeda9e","sha512":"f4ca8b79715576181fabd45e792c094c2a27f58b83a05fe1eb2138700168b3017a4926e03f74ee8d3efb448e8c0f6df77bc039e5b1aa8bd478536f5389d20e41","ssdeep":"3072:nAG82/iORs8ed4hYWyRsPmiCKTcoJev7uDo44PTbSpX9ViEosfAfHS3LD:nAG82/iOMXW4s+3KT32u04RLD","tlshash":"da642ad87596f1b55bb301b2407f140ab33d2a1b780d8960f221f8d978b889ea17bf5d","first_seen":"2025-07-09T19:03:48.778933Z","last_seen":"2025-09-05T12:30:32.519937Z","times_seen":55,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9xbuddy.in/icons/apple-touch-icon.png","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","date":"2025-08-02T12:31:56.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9xbuddy.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 15:53:48 GMT","end":"Thu, 16 Oct 2025 16:52:35 GMT"},"fingerprint":{"sha1":"C3:5D:7D:EC:7C:5D:87:A0:27:CB:AD:8F:47:AB:A4:84:8A:A9:9C:13","sha256":"5D:C3:CE:64:36:6F:14:9F:89:AC:F3:D4:C3:F7:1C:9B:ED:13:92:8D:4F:CE:62:86:9C:72:88:78:67:CF:09:09"}}},"request":{"raw":"GET /icons/apple-touch-icon.png HTTP/1.1\r\nHost: 9xbuddy.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 12:31:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 5323\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=d4Fjqz8WBJgdyVF%2FKgrEk1P%2B1bu1neiCKOrfQ%2FfVAzZh9JSXaZ%2FZbTbh9yVhGLAKRRLVXtvc3GCr4XO7zDxb2%2BW9mVDWnUK%2FHBrJIsXAIn8aUgup4SQ2t%2FyemwDS\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sun, 06 Nov 2022 06:05:05 GMT\r\netag: \"63674e91-14cb\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\naccept-ranges: bytes\r\nage: 2110\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: 968d98582f6b5693-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3819\u0026min_rtt=652\u0026rtt_var=3537\u0026sent=183\u0026recv=252\u0026lost=0\u0026retrans=0\u0026sent_bytes=17947\u0026recv_bytes=14428\u0026delivery_rate=768592\u0026ss_exit_cwnd=14905\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=c9100d39d2beae3a\u0026ts=486\u0026inflight_dur=80\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5323,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"2a1f354702de7eb8d63c8f10d2d0beaf","sha1":"5f42ee8dc3c78184fba322c0288776c86841f25d","sha256":"447d4a8b2ef5e876f4bf0145893d9f300dd62a3a49ebbc04a49282a6e4c5475a","sha512":"88593165671fedbac12dddd34503aa693bbea3474e2484167f06d289152a348f8100d92c4dc2ccd995dd648c59234e9eddb14ad36a8c326e8714743feebe70db","ssdeep":"96:nT4RL7dFdfMB+3iSKVj2cJGS9SaV+nnzm/3eQDO8B34:+LrdfMoSSKVyLba5P5JZ4","tlshash":"3ab15cd285198b4be866922c5a2d9398c074dd561f2f9e1978bab1cbade09c41f03fc0","first_seen":"2023-05-06T00:29:08Z","last_seen":"2026-06-02T21:26:34.323293Z","times_seen":283,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9xbuddy.in/build/2f216d687fe39ac06f55.png","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","date":"2025-08-02T12:31:56.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9xbuddy.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 15:53:48 GMT","end":"Thu, 16 Oct 2025 16:52:35 GMT"},"fingerprint":{"sha1":"C3:5D:7D:EC:7C:5D:87:A0:27:CB:AD:8F:47:AB:A4:84:8A:A9:9C:13","sha256":"5D:C3:CE:64:36:6F:14:9F:89:AC:F3:D4:C3:F7:1C:9B:ED:13:92:8D:4F:CE:62:86:9C:72:88:78:67:CF:09:09"}}},"request":{"raw":"GET /build/2f216d687fe39ac06f55.png HTTP/1.1\r\nHost: 9xbuddy.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 12:31:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 2855\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9YIV0X6NxMqx%2BAGnF4NHyPuVsbbVNJG4h2BVCX5fvwBQvlkSeHfYe0zNB%2FqgMJdeQsirf3CESOvyTP8SafFkr%2FqH4fQ7eDR61i4OshkU6inCOSfQBmKhBADTG9z%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sun, 15 Sep 2024 05:41:04 GMT\r\netag: \"66e67370-b27\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\naccept-ranges: bytes\r\nage: 2110\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: 968d98589f765693-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1049\u0026min_rtt=0\u0026rtt_var=1541\u0026sent=219\u0026recv=269\u0026lost=0\u0026retrans=0\u0026sent_bytes=56588\u0026recv_bytes=16458\u0026delivery_rate=3147191\u0026ss_exit_cwnd=14905\u0026ss_exit_reason=2\u0026cwnd=17562\u0026unsent_bytes=0\u0026cid=c9100d39d2beae3a\u0026ts=589\u0026inflight_dur=122\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2855,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit colormap, non-interlaced","md5":"0f599aec14b72ec73b07582979490783","sha1":"9dbc7784cdef3908157c11d776f301201cabf46e","sha256":"ff3cff66a67edc326a0f4fc5839da9dd21f55374417acfa657a01b9952b30529","sha512":"fe685593a5b06fb060f67befac4b1fb6d7686d47fe7bd8dc183628977a74bb197c4c45b4a7cd4c4e0f993b7d1b5c290832ceb8570960a7138cf3515891c921f9","ssdeep":"","tlshash":"7c514bd4a2392d3d9b4f976edaa65cd934cf54150c2b65c00600b93a0ab43439d8d74f","first_seen":"2024-09-15T08:18:18Z","last_seen":"2026-03-08T11:27:29.09553Z","times_seen":186,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ab1.9xbud.com/extract","fqdn":"ab1.9xbud.com","domain":"9xbud.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","date":"2025-08-02T12:31:56.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9xbud.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Jun 2025 08:32:42 GMT","end":"Fri, 12 Sep 2025 09:30:26 GMT"},"fingerprint":{"sha1":"F3:3E:CA:4C:84:99:62:95:75:9B:50:1B:25:27:D6:33:13:4F:1B:33","sha256":"34:40:8D:E1:B6:23:88:AC:05:6F:6D:A6:11:3A:FA:F5:E7:BB:D1:E7:89:C7:8C:8B:A5:11:C7:60:F4:5A:C4:9B"}}},"request":{"raw":"POST /extract HTTP/1.1\r\nHost: ab1.9xbud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json; charset=UTF-8\r\nX-Requested-With: xmlhttprequest\r\nx-auth-token: ad3Dq5mXrZLK05zFmGZqZ5WVypiUx5JtaGRoycKVY6XMfWeAhYHbyIO0s4iOkoGltaqWra+QhYKFk6ywfrOilYl4gLDAvoa52pOsl5WtlpNj2NaapGBllY+WZZmTYmVkX2k=\r\nx-requested-domain: 9xbuddy.in\r\nx-access-token: bmGPnmRfZ2lfk5lrzdXYpKZvZZCeqZOjlZKuXsrTXVF6nJTN02aXkZVkY2ZmkoV3mqCWlKSokJZnZWFnYZiUaQ==\r\nContent-Length: 144\r\nOrigin: https://9xbuddy.in\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9xbuddy.in/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 Aug 2025 12:31:56 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.23\r\naccess-control-allow-origin: https://9xbuddy.in\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\naccess-control-max-age: 1728000\r\naccess-control-allow-headers: content-type,x-requested-with,x-auth-token,x-requested-domain,x-access-token\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aJzta02JSStafzZfx9xEJSsEkQkhd6UKG0b9oDmjmPBcY10De0HzhUgAprQsVlheu5KUll1yDMc3Xcs9oPXaIDsLDgJLMOYCv2MxMGzsSsqaZfaETPAgG56ArzK8Bsl5\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 968d985b1d0a569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=927\u0026min_rtt=423\u0026rtt_var=486\u0026sent=20\u0026recv=18\u0026lost=0\u0026retrans=0\u0026sent_bytes=4840\u0026recv_bytes=1947\u0026delivery_rate=7203980\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=3dd2d67a9dcfabda\u0026ts=382\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.23","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4244,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3ca9d857a8c92597b9909bdfd60df4e1","sha1":"124ebc9aeb3d017bfb934f4ce859f4afaa00da45","sha256":"6642c3a971261a9e3f198380469e50ca4dca81807b997542f7bcea7aa5dd8a93","sha512":"4c3aaef6aff25bc24336924232d20d2a0cc85caace6479c730434c4144f9c95a7a4629a84be1cd46e8ab5b5821dfdd16e0c1dca9c4fa9c808a46b11de354d56b","ssdeep":"96:I6UKqOa20Ju04tYiAXK/LGDVQZg4STrEQ3WnIx4tkcFCWe/A0g4qI3LYi:I6UKqb20r/NWdZgdTQjyePFPe/Tgi33","tlshash":"e791c6f04f25ddb1e87a439be3e73904d3392325e2ec4ecaa5586a9899d6400b51f0ca","first_seen":"2025-08-02T12:32:37.090333Z","last_seen":"2025-08-02T12:32:37.090333Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9xbuddy.in/process?url=https://videzz.net/gyasljqeisml.html","fqdn":"9xbuddy.in","domain":"9xbuddy.in","tld":"in"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-02T12:31:55.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9xbuddy.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 15:53:48 GMT","end":"Thu, 16 Oct 2025 16:52:35 GMT"},"fingerprint":{"sha1":"C3:5D:7D:EC:7C:5D:87:A0:27:CB:AD:8F:47:AB:A4:84:8A:A9:9C:13","sha256":"5D:C3:CE:64:36:6F:14:9F:89:AC:F3:D4:C3:F7:1C:9B:ED:13:92:8D:4F:CE:62:86:9C:72:88:78:67:CF:09:09"}}},"request":{"raw":"GET /process?url=https://videzz.net/gyasljqeisml.html HTTP/1.1\r\nHost: 9xbuddy.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 Aug 2025 12:31:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.23\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q5tZTzdmBYhmAXzd0ibVVBU7D9oi1OuKBXYXK%2B4KOZf4rf%2FYRMn6ujQfeihU7W13zhGopA9DmOPHBB7VZgINpsXvPjmbSsfI\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 968d9853cdb256c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.23","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17654,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (11952)","md5":"ab2a6f46738a9610fa51f99d58e3b669","sha1":"383e5cc9dc760fc5873a7289b8d4abf47e93658b","sha256":"8c80901b495c460e2320ea6c3fb53d5cac4eb2d92039f597e3a9fa1cde2c6682","sha512":"f52e49903ab68d8c1c026b1e267a7a971611c21290b40cecdd6f9199e164eeffa776a38ed21c4fea908461bb9122753f61b8d2f85249c67d0d16efb195670d48","ssdeep":"192:ipU+54C8KHS56DQ1hOc7/f/dogeVZqLCl2Ms3AEXKW150ZoB307TyEP+Pp2lC1KB:sWw+VxT4ev4bb21IWGUGsZO","tlshash":"9682fd6a61619ebb3342c591fdc36086f401009fcde55894f05dc6bbefacd252a13aaf","first_seen":"2025-08-02T12:32:37.092206Z","last_seen":"2025-08-02T12:32:37.092206Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":31,"dns":1,"connect":1,"send":0,"wait":199,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}