GET /build/403.0ae41371bd7ead4356ae.js HTTP/1.1
Host: 9xbuddy.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.site/process?url=https://beeg.com/-0622946381289579
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 24 Jul 2025 18:54:24 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5KdzkzOSctw4PtYsz46LFVHcABTCc1KpDwoL%2BrN0TSsw7M4fR3XhPDY%2FMBHy8Am4VaVj2vBECsRxH2imygMZezHJf%2B0aGtxnjX2zqdJVOmqywFGvQ8zDtkXlrg2Gkbg%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 13:27:10 GMT
vary: Accept-Encoding
etag: W/"686e6e2e-9c63"
strict-transport-security: max-age=15768000; includeSubDomains
age: 3369
cache-control: max-age=31536000
cf-cache-status: HIT
content-encoding: br
cf-ray: 9645a03c580a0b31-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1763&min_rtt=685&rtt_var=1086&sent=100&recv=111&lost=0&retrans=0&sent_bytes=39077&recv_bytes=8048&delivery_rate=5526932&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=29478&unsent_bytes=0&cid=1778ebaa282e76c9&ts=384&inflight_dur=62&x=40"

POST /extract HTTP/1.1
Host: ab.9xbud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: xmlhttprequest
x-auth-token: ad3Dq5mXrZLUzqvJx5JtaGRoycKVnMWYZmpnlZXKmJSOcqF/YYG5rqbMtIWHhY3DrqaLqcF6hJJ/g7nAd7SvhHaSiKmtsZa9sYavlaaYydphl5SpqpejkZKWZZWQZmhkX2WTlg==
x-requested-domain: 9xbuddy.site
x-access-token: bmGPnmRfZ2lfk5lrzdXYpKZvZZCeqZOjlZKuXtTOqJZcV3jHx6LUkJZkZGVmkpViUXSaoJqW0N1jYmZrX5KVaZeW
Content-Length: 138
Origin: https://9xbuddy.site
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 24 Jul 2025 18:54:25 GMT
content-type: application/json; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
x-powered-by: PHP/8.3.23
access-control-allow-origin: https://9xbuddy.site
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 1728000
access-control-allow-headers: content-type,x-requested-with,x-auth-token,x-requested-domain,x-access-token
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XAzkf77fsurCiS4CYMKrqD4KRg3ri4iZD4HmxfpzmoovP4KYxzAIeJ2M0O0el96qn21z5tt69DQgEQUTM3MMCh5cu6u4x%2FY7p7qcRAgAwrRdOFDcXFmcZqnfbZZ6pLc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9645a03ea9627130-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=695&min_rtt=486&rtt_var=213&sent=22&recv=19&lost=0&retrans=0&sent_bytes=4973&recv_bytes=2079&delivery_rate=7350253&cwnd=256&unsent_bytes=0&cid=c5ff6b33372855f9&ts=321&x=0"
X-Firefox-Spdy: h2

GET /icons/favicon-16x16.png HTTP/1.1
Host: 9xbuddy.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.site/process?url=https://beeg.com/-0622946381289579
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 24 Jul 2025 18:54:24 GMT
content-type: image/png
content-length: 680
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U%2BS29t4vvWBrBqAhD3rLMSYRtUa%2BqOH9Jhj0PaqTWNLfstZ8EPs2ZBfkvRoZ%2F39DEWzOmyOeFo8ZSDvAss59Bmp5vRaj7lzxOfg2zydi6MGmo8S8Y2uGOkjRWMWiiIM%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 06 Nov 2022 06:05:05 GMT
etag: "63674e91-2a8"
strict-transport-security: max-age=15768000; includeSubDomains
accept-ranges: bytes
age: 3367
cache-control: max-age=31536000
cf-cache-status: HIT
cf-ray: 9645a03bf8010b31-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1938&min_rtt=685&rtt_var=1520&sent=76&recv=104&lost=0&retrans=0&sent_bytes=17945&recv_bytes=6715&delivery_rate=3288812&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=27456&unsent_bytes=0&cid=1778ebaa282e76c9&ts=321&inflight_dur=53&x=40"

GET /build/2f216d687fe39ac06f55.png HTTP/1.1
Host: 9xbuddy.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.site/process?url=https://beeg.com/-0622946381289579
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 24 Jul 2025 18:54:24 GMT
content-type: image/png
content-length: 2855
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZNOva1k6BeB4YxysAujlfcSf6o%2FIpFD5vPYxVeufi29UHx6hpLFoy4jsEesYw99grMNdq1DFOJ9YQZjtsdSv9yDG5hMo6sUThC0opiEzvudruTYBfiPdKs9K6iqzbaM%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 15 Sep 2024 05:41:04 GMT
etag: "66e67370-b27"
strict-transport-security: max-age=15768000; includeSubDomains
accept-ranges: bytes
age: 3369
cache-control: max-age=31536000
cf-cache-status: HIT
cf-ray: 9645a03ca80e0b31-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1188&min_rtt=603&rtt_var=645&sent=110&recv=119&lost=0&retrans=0&sent_bytes=50251&recv_bytes=8697&delivery_rate=5526932&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=29478&unsent_bytes=0&cid=1778ebaa282e76c9&ts=429&inflight_dur=86&x=40"

POST /token HTTP/1.1
Host: ab.9xbud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: xmlhttprequest
x-auth-token: ad3Dq5mXrZLUzqvJx5JtaGRoycKVnMWYZmpnlZXKmJSOcqF/YYG5rqbMtIWHhY3DrqaLqcF6hJJ/g7nAd7SvhHaSiKmtsZa9sYavlaaYydphl5SpqpejkZKWZZWQZmhkX2WTlg==
x-requested-domain: 9xbuddy.site
x-access-token: false
Content-Length: 2
Origin: https://9xbuddy.site
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 24 Jul 2025 18:54:24 GMT
content-type: application/json; charset=UTF-8
server: cloudflare
vary: Accept-Encoding
x-powered-by: PHP/8.3.23
access-control-allow-origin: https://9xbuddy.site
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 1728000
access-control-allow-headers: content-type,x-requested-with,x-auth-token,x-requested-domain,x-access-token
content-encoding: br
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=jjC7KIFJhILsTFRFcoFGftns%2BQganHqg4E%2F36%2Fx6WUE4KEmgCPSysx4SEObxZWZK0q78ZdHkERXarFdGimvV%2FujYXHgoDpQhWDk%3D"}]}
cf-ray: 9645a03df8927130-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /build/2aaaa621b98a571fafbc.png HTTP/1.1
Host: 9xbuddy.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.site/process?url=https://beeg.com/-0622946381289579
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 24 Jul 2025 18:54:27 GMT
content-type: image/png
content-length: 5699
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tR7rQzh6puU%2FO%2B7mh24rlCJT6OTzv%2FyNxwTjlydXsuDLLYi1VUkELll6wvMDlNur%2BpFUpYKIMwmNscLPnZgNXffGCq6vYeLixjwif4MKpPcM95%2FS7kzvg1Jw%2F9XL5Tc%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 16 Nov 2024 05:54:18 GMT
etag: "6738338a-1643"
strict-transport-security: max-age=15768000; includeSubDomains
accept-ranges: bytes
age: 3372
cache-control: max-age=31536000
cf-cache-status: HIT
cf-ray: 9645a04f29140b31-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1141&min_rtt=603&rtt_var=577&sent=114&recv=121&lost=0&retrans=0&sent_bytes=53924&recv_bytes=9071&delivery_rate=5526932&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=29478&unsent_bytes=0&cid=1778ebaa282e76c9&ts=3400&inflight_dur=87&x=40"

GET /build/341.0ae41371bd7ead4356ae.js HTTP/1.1
Host: 9xbuddy.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.site/process?url=https://beeg.com/-0622946381289579
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 24 Jul 2025 18:54:24 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4bRDP6zHj%2B6uDAuAVHtVpIgpkORDFMV81%2FX1kTkwCq0hmLo%2Ffh90Qb%2BxFUaWGiBlm%2FN5%2BbUP3JFWzOik%2Bh7EdS%2FiGCKBasf5s%2FRsAfK5zhEa02K2ko%2FS7FORSt4H2Jc%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 13:27:10 GMT
vary: Accept-Encoding
etag: W/"686e6e2e-20f0"
strict-transport-security: max-age=15768000; includeSubDomains
age: 3369
cache-control: max-age=31536000
cf-cache-status: HIT
content-encoding: br
cf-ray: 9645a03bcfff0b31-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2403&min_rtt=685&rtt_var=1936&sent=64&recv=99&lost=0&retrans=0&sent_bytes=7922&recv_bytes=5933&delivery_rate=721642&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=18058&unsent_bytes=0&cid=1778ebaa282e76c9&ts=298&inflight_dur=49&x=40"

GET /build/615.0ae41371bd7ead4356ae.js HTTP/1.1
Host: 9xbuddy.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.site/process?url=https://beeg.com/-0622946381289579
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 24 Jul 2025 18:54:24 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vFpTHiK7geZBgDziWJ26Kgrbo75UkmeAsBAxpAMUpW9h0%2BoLGd8ze2bSoDxccYaPYtWY4S52WN5KNkMuLqt8LQFfzf4zae6PJmqlFvHi1NEEcH%2B7vOlei7wzpzYBMaM%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 13:27:10 GMT
vary: Accept-Encoding
etag: W/"686e6e2e-b80"
strict-transport-security: max-age=15768000; includeSubDomains
age: 3369
cache-control: max-age=31536000
cf-cache-status: HIT
content-encoding: br
cf-ray: 9645a03c38060b31-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1803&min_rtt=685&rtt_var=1410&sent=80&recv=107&lost=0&retrans=0&sent_bytes=19446&recv_bytes=7359&delivery_rate=3288812&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=29478&unsent_bytes=0&cid=1778ebaa282e76c9&ts=362&inflight_dur=57&x=40"

GET /build/585.0ae41371bd7ead4356ae.js HTTP/1.1
Host: 9xbuddy.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.site/process?url=https://beeg.com/-0622946381289579
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 24 Jul 2025 18:54:24 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=53Jpcepy7LAuOa5g9RvTa%2Bp00xTo%2Br4m2kB1SFhT39K2Vr%2F59GbsyFCMQ0qF%2FUeuO1eJkDBb4IPDcQ5zOndytul7mFfhmFy%2BJBVGnWB82jRCQbuGpbKhIsBaNKG%2BzuQ%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 13:27:10 GMT
vary: Accept-Encoding
etag: W/"686e6e2e-570b"
strict-transport-security: max-age=15768000; includeSubDomains
age: 3369
cache-control: max-age=31536000
cf-cache-status: HIT
content-encoding: br
cf-ray: 9645a03c58090b31-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1763&min_rtt=685&rtt_var=1086&sent=92&recv=111&lost=0&retrans=0&sent_bytes=30501&recv_bytes=8048&delivery_rate=5526932&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=29478&unsent_bytes=0&cid=1778ebaa282e76c9&ts=382&inflight_dur=61&x=40"

OPTIONS /extract HTTP/1.1
Host: ab.9xbud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-access-token,x-auth-token,x-requested-domain,x-requested-with
Referer: https://9xbuddy.site/
Origin: https://9xbuddy.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 24 Jul 2025 18:54:25 GMT
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
x-powered-by: PHP/8.3.23
access-control-allow-origin: https://9xbuddy.site
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 1728000
access-control-allow-headers: content-type,x-requested-with,x-auth-token,x-requested-domain,x-access-token
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4SKHoGA1UZ1FoZpDnN4GLT7yTjsoMLE1XItLP1JyMNau5osNMDtKCbaKcTTNF9bM%2BPrgXMAmy%2FipiScUwgZqZaxYjMDmQiZoor6V71SjPkdmVAkb%2BorQXTg0aziiVuw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9645a03e49067130-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=698&min_rtt=486&rtt_var=290&sent=16&recv=15&lost=0&retrans=0&sent_bytes=4370&recv_bytes=1750&delivery_rate=7350253&cwnd=256&unsent_bytes=0&cid=c5ff6b33372855f9&ts=259&x=0"
X-Firefox-Spdy: h2

GET /rHH727qVeN4r6/7972 HTTP/1.1
Host: samekhsbensh.cyou
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 24 Jul 2025 18:54:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://9xbuddy.site
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9j01OwzAQhZPmr5Q29Ek5AEdI0lY0ayQ4AAuWkR1PW0PiqRzTwu0xRLB7%2BvTNm5kgCGbFHcJLukD0IXa4l%2BXDVlWbqqFGKVk3TS03QlFJu%2F1%2BW5cKN3psnZA9uRjzcRDWte4SY3kkQ1Z3bceKVlh764%2B8G76aGIm0wihkzxNGMnizx%2BLlp%2BN8YkPIpOXrSLaIEBsxePCkLR3408vijS2iarP1WRufwxIzHosoXyJ71Ub5yTzHrCrzdRrg9twLd2A7tFqlCZKj9V8gfMS8E46ObL%2BQDix1TwD3qv3Xf%2FeurlNhO92VKrrojpCwO5H9BvLMWgo%3D; expires=Fri, 25-Jul-2025 18:54:25 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjA9l6BadnCbbYMXXgFZhEDwxyZGfu5%2B2zxLp5XKcVpAjYTkrrM6yKvDnl5qkBPcNuBRwfdin8PX5AHF0ewd9h0wUrWyOzi8kes%2FgYZbM%2FWfLJe7ByNuABeWjfDzT72l%2F4KmjSBo2gGh3uqQC%2B9%2BwFe7x3U; expires=Fri, 25-Jul-2025 18:54:25 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff

GET /1clkn/9537 HTTP/1.1
Host: samekhsbensh.cyou
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.site/
Cookie: GL_UI4=eJw9j01OwzAQhZPmr5Q29Ek5AEdI0lY0ayQ4AAuWkR1PW0PiqRzTwu0xRLB7%2BvTNm5kgCGbFHcJLukD0IXa4l%2BXDVlWbqqFGKVk3TS03QlFJu%2F1%2BW5cKN3psnZA9uRjzcRDWte4SY3kkQ1Z3bceKVlh764%2B8G76aGIm0wihkzxNGMnizx%2BLlp%2BN8YkPIpOXrSLaIEBsxePCkLR3408vijS2iarP1WRufwxIzHosoXyJ71Ub5yTzHrCrzdRrg9twLd2A7tFqlCZKj9V8gfMS8E46ObL%2BQDix1TwD3qv3Xf%2FeurlNhO92VKrrojpCwO5H9BvLMWgo%3D; GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjA9l6BadnCbbYMXXgFZhEDwxyZGfu5%2B2zxLp5XKcVpAjYTkrrM6yKvDnl5qkBPcNuBRwfdin8PX5AHF0ewd9h0wUrWyOzi8kes%2FgYZbM%2FWfLJe7ByNuABeWjfDzT72l%2F4KmjSBo2gGh3uqQC%2B9%2BwFe7x3U
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 24 Jul 2025 18:54:26 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff

GET /build/151.0ae41371bd7ead4356ae.js HTTP/1.1
Host: 9xbuddy.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.site/process?url=https://beeg.com/-0622946381289579
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 24 Jul 2025 18:54:24 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i%2B3WYJxu%2BGFrxqwUGs3w3ry9Wr37FzxVoOWgVkygbB6uAeN%2BimbaHM4yvcMFwUzh%2Fgs1uvh4xT5v8b5z0R0HZVqdfL6d4w%2FcVNssRrhTbwz0CawhALJkq%2Bhpeec3LPU%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 13:27:10 GMT
vary: Accept-Encoding
etag: W/"686e6e2e-51f6"
strict-transport-security: max-age=15768000; includeSubDomains
age: 3369
cache-control: max-age=31536000
cf-cache-status: HIT
content-encoding: br
cf-ray: 9645a03c38050b31-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1803&min_rtt=685&rtt_var=1410&sent=80&recv=107&lost=0&retrans=0&sent_bytes=19446&recv_bytes=7359&delivery_rate=3288812&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=29478&unsent_bytes=0&cid=1778ebaa282e76c9&ts=362&inflight_dur=57&x=40"

GET /process?url=https://beeg.com/-0622946381289579 HTTP/1.1
Host: 9xbuddy.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 24 Jul 2025 18:54:24 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
vary: Accept-Encoding
x-powered-by: PHP/8.3.23
strict-transport-security: max-age=15768000; includeSubDomains
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ttasuxMAzzG5xhAgSzbVo1Uf2lUJVkcC9kET%2BA2BPnnZ6O5fk72V3ietnd8hpguOP3U0x6IJWFSJpVEyzve%2FVlM%2FyKqd3VGrYY4%3D"}]}
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: 9645a0394d0656cb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /build/main.0ae41371bd7ead4356ae.css HTTP/1.1
Host: 9xbuddy.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.site/process?url=https://beeg.com/-0622946381289579
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 24 Jul 2025 18:54:24 GMT
content-type: text/css
server: cloudflare
last-modified: Wed, 09 Jul 2025 13:27:10 GMT
vary: Accept-Encoding
etag: "686e6e2e-8ae5"
strict-transport-security: max-age=15768000; includeSubDomains
content-encoding: br
age: 3369
cache-control: max-age=31536000
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=T8gexdrV4Z97LP5JBFbhLQOOfG51qFtRfycdMEc7enT64YwDD5xK9iQ2HBaxZ68H48xaVIP2toyANJNwW%2F1BNWYiZNW86yoKpNg%3D"}]}
cf-ray: 9645a03b1f4456cb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /build/291f13891176f90733ca.png HTTP/1.1
Host: 9xbuddy.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.site/process?url=https://beeg.com/-0622946381289579
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 24 Jul 2025 18:54:24 GMT
content-type: image/png
content-length: 2501
server: cloudflare
last-modified: Sun, 06 Nov 2022 06:05:05 GMT
etag: "63674e91-9c5"
strict-transport-security: max-age=15768000; includeSubDomains
accept-ranges: bytes
age: 3369
cache-control: max-age=31536000
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=cW2d%2B5M90%2B4Jgbf3eZ0shljr%2FtgPk3l41LOFg399Mj69qyEJGn4F%2BhpO5LXEUkoermcGt6e%2B3b9tX7ssUjIRnLUIqYgczZS69uE%3D"}]}
cf-ray: 9645a03b1f4756cb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /build/main.0ae41371bd7ead4356ae.js HTTP/1.1
Host: 9xbuddy.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.site/process?url=https://beeg.com/-0622946381289579
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 24 Jul 2025 18:54:24 GMT
content-type: application/javascript
server: cloudflare
last-modified: Wed, 09 Jul 2025 13:27:10 GMT
vary: Accept-Encoding
etag: "686e6e2e-51f5d"
strict-transport-security: max-age=15768000; includeSubDomains
content-encoding: br
age: 3369
cache-control: max-age=31536000
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Th933cIygxMdz%2F2kxoP6Yf8fx9Ons04iqtDqnkp7zowLxZ1SORQWCST9uN0hsUfps1Yv9kP5SyaPVspFe1%2BSssMEKm5xo2ytvUo%3D"}]}
cf-ray: 9645a03b1f4956cb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /icons/apple-touch-icon.png HTTP/1.1
Host: 9xbuddy.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.site/process?url=https://beeg.com/-0622946381289579
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 24 Jul 2025 18:54:24 GMT
content-type: image/png
content-length: 5323
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EkaclKeykcx%2FekMHRhAnUvBbnVXcOfXof1nGO6dxY8KWgSXIt8bfi00GXBhXWupfSA%2BVv5TyHl6rKR2bR8vjxj5Zu%2B4uf8jVshPgStI%2BlrtcOYLiCc8bYt616aohXH4%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 06 Nov 2022 06:05:05 GMT
etag: "63674e91-14cb"
strict-transport-security: max-age=15768000; includeSubDomains
accept-ranges: bytes
age: 2555
cache-control: max-age=31536000
cf-cache-status: HIT
cf-ray: 9645a03bf8000b31-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2070&min_rtt=685&rtt_var=1676&sent=71&recv=103&lost=0&retrans=0&sent_bytes=11772&recv_bytes=6671&delivery_rate=2207308&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=21856&unsent_bytes=0&cid=1778ebaa282e76c9&ts=317&inflight_dur=52&x=40"

OPTIONS /token HTTP/1.1
Host: ab.9xbud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-access-token,x-auth-token,x-requested-domain,x-requested-with
Referer: https://9xbuddy.site/
Origin: https://9xbuddy.site
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 24 Jul 2025 18:54:24 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
vary: Accept-Encoding
x-powered-by: PHP/8.3.23
access-control-allow-origin: https://9xbuddy.site
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 1728000
access-control-allow-headers: content-type,x-requested-with,x-auth-token,x-requested-domain,x-access-token
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Ab4uf0%2BSR74VVAfmnqFmbewOYXb7L2aJDqoFeD4jilE1C%2FE59boIIQY2Br5OYiCEp1ltv33GfJ%2BCO0WpJZALMcFtr8BIxBYS128%3D"}]}
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: 9645a03d2fa67130-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2