| 9xbuddy.com/build/main.62473cea6de515104ed3.css |  104.21.235.82 | 200 OK | 35 kB |
URL GET 9xbuddy.com/build/main.62473cea6de515104ed3.css IP104.21.235.82:443
Requested byhttps://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a CertificateIssuerGoogle Trust Services Subject9xbuddy.com Fingerprint06:50:52:94:AC:9A:21:47:3A:4A:D1:DE:5D:A9:C2:2B:E6:D7:DB:AA ValiditySat, 19 Apr 2025 03:50:07 GMT - Fri, 18 Jul 2025 04:48:51 GMT
File typeASCII text, with very long lines (33114) Hashbb7dae43d4a1acdb9b079669c9e4ee07 4667334c7276c41614449b6c06c16503b9b2dd55 5477945eb0717029a303c60cdfce7dc3bc4c4b3f0c00412391be90a09d107581
GET /build/main.62473cea6de515104ed3.css HTTP/1.1
Host: 9xbuddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 17 May 2025 10:04:41 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=261pk4iVYy%2BzKkEOVNHPR2lVIY%2BQ1NIkdszb7LTUxMeC9Zdf%2Bz3lcmQuxQkFOyiFKHh%2FROKPS7TS7CEku%2B6kqOZF23DWSVCA71eUmAFU72jAx2obIPBwOpR0nP4vig%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 28 Feb 2025 15:19:41 GMT
vary: Accept-Encoding
etag: W/"67c1d40d-8a4f"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, nosnippet, noarchive
age: 1295
cache-control: max-age=31536000
cf-cache-status: HIT
content-encoding: br
cf-ray: 94124ac9ae189302-CPH
server: cloudflare
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=28520&min_rtt=27219&rtt_var=12807&sent=20&recv=13&lost=0&retrans=0&sent_bytes=7263&recv_bytes=2057&delivery_rate=14108&cwnd=12000&unsent_bytes=0&cid=3c9d3e8e7143af7a&ts=246&x=16"
|
|
| 9xbuddy.com/build/422.62473cea6de515104ed3.js | 104.21.235.82 | 200 OK | 38 kB |
URL GET 9xbuddy.com/build/422.62473cea6de515104ed3.js IP104.21.235.82:443
Requested byhttps://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a CertificateIssuerGoogle Trust Services Subject9xbuddy.com Fingerprint06:50:52:94:AC:9A:21:47:3A:4A:D1:DE:5D:A9:C2:2B:E6:D7:DB:AA ValiditySat, 19 Apr 2025 03:50:07 GMT - Fri, 18 Jul 2025 04:48:51 GMT
File typeJavaScript source, ASCII text, with very long lines (38244), with no line terminators Hash413d13bd3777171cf2b82698facf9562 97f9fc3c196efee8f6edbac8f5a329cbaa331877 f31100b553392c92b2648f9f3f81864b4cfa3243c93f38233e5a0d777b9e0e22
GET /build/422.62473cea6de515104ed3.js HTTP/1.1
Host: 9xbuddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 17 May 2025 10:04:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dKNEPdR4q0J8eZ5QUCQaz3Fqft%2FBcuwJEkKuNsXxT7KFxGzbDwCg7uMwTFIIIO1UiMuVOXtf1cvBs5231pfjXv2palnRJL77dNkRI89oJHZmi19PxjGF0L8bFCJeXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 28 Feb 2025 15:19:41 GMT
vary: Accept-Encoding
etag: W/"67c1d40d-9564"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, nosnippet, noarchive
age: 1295
cache-control: max-age=31536000
cf-cache-status: HIT
content-encoding: br
cf-ray: 94124acb8e449302-CPH
server: cloudflare
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=26711&min_rtt=23281&rtt_var=4979&sent=161&recv=36&lost=0&retrans=0&sent_bytes=155363&recv_bytes=5519&delivery_rate=140989&cwnd=91200&unsent_bytes=0&cid=3c9d3e8e7143af7a&ts=540&x=16"
|
|
| 9xbuddy.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/6fab0cec561d/main.js? | 104.21.235.82 | 200 OK | 8.5 kB |
URL GET 9xbuddy.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/6fab0cec561d/main.js? IP104.21.235.82:443
Requested byhttps://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a CertificateIssuerGoogle Trust Services Subject9xbuddy.com Fingerprint06:50:52:94:AC:9A:21:47:3A:4A:D1:DE:5D:A9:C2:2B:E6:D7:DB:AA ValiditySat, 19 Apr 2025 03:50:07 GMT - Fri, 18 Jul 2025 04:48:51 GMT
File typeJavaScript source, ASCII text, with very long lines (8462), with no line terminators Hash5da3cde3e29a5164d942360cfcb9ccd7 478f40a6a4a8143b300b195c59e0498ee9b921c5 30d0e389ad47ba51c10e7e27c496d18d70c7e196ea3a094af403e86884f7e97c
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/6fab0cec561d/main.js? HTTP/1.1
Host: 9xbuddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 17 May 2025 10:04:42 GMT
content-type: application/javascript; charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a2SVa92BvV1bkKJQW9oI%2BU0uIVrUzfPD%2FMx5T9dKrJD4RM6H3kcRj%2F5Av%2BJDB5FVXU1dNZFp9eZNVN1XfWQUaB8SiIN3xvdwL6etwa6G12737UfQJd65Sy4gnBnPTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
x-content-type-options: nosniff
content-encoding: br
cf-ray: 94124acbbe4a9302-CPH
server: cloudflare
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=25845&min_rtt=23281&rtt_var=3397&sent=177&recv=40&lost=0&retrans=0&sent_bytes=170003&recv_bytes=5915&delivery_rate=585823&cwnd=91200&unsent_bytes=0&cid=3c9d3e8e7143af7a&ts=563&x=16"
|
|
| 9xbuddy.com/build/2aaaa621b98a571fafbc.png | 104.21.235.82 | 200 OK | 5.7 kB |
URL GET 9xbuddy.com/build/2aaaa621b98a571fafbc.png IP104.21.235.82:443
Requested byhttps://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a CertificateIssuerGoogle Trust Services Subject9xbuddy.com Fingerprint06:50:52:94:AC:9A:21:47:3A:4A:D1:DE:5D:A9:C2:2B:E6:D7:DB:AA ValiditySat, 19 Apr 2025 03:50:07 GMT - Fri, 18 Jul 2025 04:48:51 GMT
File typePNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced Hashc1ea0051b47216343b9508ee9d9b1188 f7c0007802c3cc1a0d3ee148bcc035777c3d89b9 cff175c1f891616aa4684476be9d76611cb23557fd322297b21761ded6ab6ed9
GET /build/2aaaa621b98a571fafbc.png HTTP/1.1
Host: 9xbuddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a
Cookie: cf_clearance=9viy8lddfXIxjGbGS1hkIxU4_Sk4JCNK_A2kWPoP9WU-1747476282-1.2.1.1-S96hzBU.VOFKtHBohVDlwKDljEmdtalo3Rw6AYm.vLyGYqOf2p0IGNcsTHZm0Dc7.M7ptb3d2Ah6.ZRMPjNTW_3kHLof37bf1MPBnzmjy0Tloft.YoMcRRyFBEjzEvIiPcVScQ4Ex_7M1btsryL7kbEMStbPm4XDJjzOIVnhC7SOa4JQK8tKsNkRPrPHihgioODUGBSjZtwoEgt.EVGR1NhOwxxIQMaQee9fcEtmYp1l7N46eBu7nY7ZPkUA_36fWPkZC5Ky9GtunipDUoBQp5LSGy_QRW9pyG6wfIKKpQW12TjNspAtP9upzpI0a4sjt5vduFUdsTIA9Jx1kZB13uW7ufxQy0RBg1KdwS9rv_Y
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 17 May 2025 10:04:45 GMT
content-type: image/png
content-length: 5699
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AI6OD8XHEwvXpqi5r6O9AVGosz8oOJXIHwwoaiNf5hKTWHYRZpUZ5xdzezkDnTRvl9T0UcYiJvo7BIU2PHfvdr%2F8GjW%2BvA3RYrrhTpTqjl18NyKpEYb6mMi0%2F02ydg%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 16 Nov 2024 05:54:18 GMT
etag: "6738338a-1643"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, nosnippet, noarchive
accept-ranges: bytes
age: 1298
cache-control: max-age=31536000
cf-cache-status: HIT
cf-ray: 94124ade7f7a9302-CPH
server: cloudflare
x-content-type-options: nosniff
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=25407&min_rtt=23281&rtt_var=1717&sent=190&recv=56&lost=0&retrans=0&sent_bytes=175897&recv_bytes=19815&delivery_rate=16835&cwnd=91200&unsent_bytes=0&cid=3c9d3e8e7143af7a&ts=3565&x=16"
|
|
| bandsawcrooner.shop/rHH727qVeN4r6/7972 |  23.109.170.19 | 200 OK | 5 B |
URL GET bandsawcrooner.shop/rHH727qVeN4r6/7972 IP23.109.170.19:443
Requested byhttps://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a CertificateIssuerLet's Encrypt Subjectbandsawcrooner.shop Fingerprint71:DC:EF:38:10:9C:F7:DB:72:F7:6D:43:34:AF:B4:97:0F:F1:FA:31 ValidityTue, 13 May 2025 08:20:49 GMT - Mon, 11 Aug 2025 08:20:48 GMT
File typeASCII text, with no line terminators Hash848667c49f5d3aef59cd65ed276cd7ae bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763 cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /rHH727qVeN4r6/7972 HTTP/1.1
Host: bandsawcrooner.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 May 2025 10:04:43 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://9xbuddy.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Sun, 18-May-2025 10:04:43 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Sun, 18-May-2025 10:04:43 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| 9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a | 104.21.235.82 | 200 OK | 19 kB |
URL User Request GET 9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a IP104.21.235.82:443
CertificateIssuerGoogle Trust Services Subject9xbuddy.com Fingerprint06:50:52:94:AC:9A:21:47:3A:4A:D1:DE:5D:A9:C2:2B:E6:D7:DB:AA ValiditySat, 19 Apr 2025 03:50:07 GMT - Fri, 18 Jul 2025 04:48:51 GMT
File typeHTML document, ASCII text, with very long lines (11947) Hashcebf8b838b5113870c338026319b31ff ed9bfc9ee72952b0e4c4f408984e9bb91d0972a3 175bce9d2aa9641b0c8446b07927745e4df0d5ada8016d82bd698bef42e2cc3f
GET /process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a HTTP/1.1
Host: 9xbuddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 17 May 2025 10:04:41 GMT
content-type: text/html; charset=UTF-8
cf-ray: 94124ac78f16d967-HEL
server: cloudflare
content-encoding: br
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, nosnippet, noarchive
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mbtTuR%2Fzc5zO94%2BM%2BQjMBPgsrMHlOWbNaHdI27%2BwjFe%2Fy4iPbALGXQMF1siP8SQDf4B2SB079BnC2h%2B8fjfQWj8KXD318zp4BBF5mFwujpK6bY254WRXhKqhjQVWpg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=33988&min_rtt=28153&rtt_var=14940&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3196&recv_bytes=1176&delivery_rate=153319&cwnd=254&unsent_bytes=0&cid=2fd5fa06a05c64eb&ts=158&x=0"
X-Firefox-Spdy: h2
|
|
| 9xbuddy.com/build/291f13891176f90733ca.png | 104.21.235.82 | 200 OK | 2.5 kB |
URL GET 9xbuddy.com/build/291f13891176f90733ca.png IP104.21.235.82:443
Requested byhttps://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a CertificateIssuerGoogle Trust Services Subject9xbuddy.com Fingerprint06:50:52:94:AC:9A:21:47:3A:4A:D1:DE:5D:A9:C2:2B:E6:D7:DB:AA ValiditySat, 19 Apr 2025 03:50:07 GMT - Fri, 18 Jul 2025 04:48:51 GMT
File typePNG image data, 217 x 55, 8-bit colormap, non-interlaced Hashf19a76e1de03a1ecb9c45dcfb96bce41 2156ba7ed189b2f22b87e87eb9ffcaa7ebb4db0c 55340830b75351b2ad4154871c488f34c0b66c8cef18719f3f7a8f9dc190cd58
GET /build/291f13891176f90733ca.png HTTP/1.1
Host: 9xbuddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 17 May 2025 10:04:41 GMT
content-type: image/png
content-length: 2501
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KLhpbd5s2bfzwtU%2F02gPT0zRbcFPlcvS7fcKxheim4MlWmeBQkSqCXTSmqox%2Fi5UNJkT5ypszX0qGM%2FfUA7dlxBjjP%2FEyfS0TMgycgNt73e4DAkmMpxNfPGtv3aEiQ%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 06 Nov 2022 06:05:05 GMT
etag: "63674e91-9c5"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, nosnippet, noarchive
accept-ranges: bytes
age: 1294
cache-control: max-age=31536000
cf-cache-status: HIT
cf-ray: 94124ac9ae199302-CPH
server: cloudflare
x-content-type-options: nosniff
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=28520&min_rtt=27219&rtt_var=12807&sent=17&recv=13&lost=0&retrans=0&sent_bytes=3952&recv_bytes=2057&delivery_rate=14108&cwnd=12000&unsent_bytes=0&cid=3c9d3e8e7143af7a&ts=245&x=16"
|
|
| 9xbuddy.com/icons/favicon-16x16.png | 104.21.235.82 | 200 OK | 680 B |
URL GET 9xbuddy.com/icons/favicon-16x16.png IP104.21.235.82:443
Requested byhttps://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a CertificateIssuerGoogle Trust Services Subject9xbuddy.com Fingerprint06:50:52:94:AC:9A:21:47:3A:4A:D1:DE:5D:A9:C2:2B:E6:D7:DB:AA ValiditySat, 19 Apr 2025 03:50:07 GMT - Fri, 18 Jul 2025 04:48:51 GMT
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hashf310dc4b30e94e078aa3d8ce14a93a7d f6b2f0419a8bb65aafd4c185079584494439cf4a 5261947833061f72396f2e0f6b27598ae37585d8de6da4bed8df9f683181aaab
GET /icons/favicon-16x16.png HTTP/1.1
Host: 9xbuddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 17 May 2025 10:04:42 GMT
content-type: image/png
content-length: 680
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MgjD6gSYNgD08rkAA%2FFt4SSA8vWCYcZfqPAa%2BipMiqELE9vhMozxan0M%2BeTbrEVtm2v69M3vgK9KcIUiM0%2FdOop5H7Kf8R6bPbgBbNvPAFS9bSuY54aH2G8%2BhMoUbA%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 06 Nov 2022 06:05:05 GMT
etag: "63674e91-2a8"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, nosnippet, noarchive
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1293
accept-ranges: bytes
cf-ray: 94124acb2e349302-CPH
server: cloudflare
x-content-type-options: nosniff
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=28024&min_rtt=23281&rtt_var=6922&sent=135&recv=28&lost=0&retrans=0&sent_bytes=134308&recv_bytes=3789&delivery_rate=112145&cwnd=91200&unsent_bytes=0&cid=3c9d3e8e7143af7a&ts=477&x=16"
|
|
| 9xbuddy.com/build/2f216d687fe39ac06f55.png | 104.21.235.82 | 200 OK | 2.9 kB |
URL GET 9xbuddy.com/build/2f216d687fe39ac06f55.png IP104.21.235.82:443
Requested byhttps://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a CertificateIssuerGoogle Trust Services Subject9xbuddy.com Fingerprint06:50:52:94:AC:9A:21:47:3A:4A:D1:DE:5D:A9:C2:2B:E6:D7:DB:AA ValiditySat, 19 Apr 2025 03:50:07 GMT - Fri, 18 Jul 2025 04:48:51 GMT
File typePNG image data, 144 x 144, 8-bit colormap, non-interlaced Hash0f599aec14b72ec73b07582979490783 9dbc7784cdef3908157c11d776f301201cabf46e ff3cff66a67edc326a0f4fc5839da9dd21f55374417acfa657a01b9952b30529
GET /build/2f216d687fe39ac06f55.png HTTP/1.1
Host: 9xbuddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 17 May 2025 10:04:42 GMT
content-type: image/png
content-length: 2855
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BdQ%2Fe0XaOn2mcvZNw5T5xVBxtO63Ef99Xmx1tOb6tLMgWhUkADYV4S2xbTbtTkE7KCvxH87Z%2BcYFH4Bwd%2BQolffPfK6NH1iiKtQ6AC2dhkN5bYz2q9BygdrnuXQWLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 15 Sep 2024 05:41:04 GMT
etag: "66e67370-b27"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, nosnippet, noarchive
accept-ranges: bytes
age: 1295
cache-control: max-age=31536000
cf-cache-status: HIT
cf-ray: 94124acb9e459302-CPH
server: cloudflare
x-content-type-options: nosniff
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=26711&min_rtt=23281&rtt_var=4979&sent=172&recv=36&lost=0&retrans=0&sent_bytes=166317&recv_bytes=5519&delivery_rate=140989&cwnd=91200&unsent_bytes=0&cid=3c9d3e8e7143af7a&ts=548&x=16"
|
|
| pic.rutube.ru/video/71/58/71585a6b9272871ef16cd053077640f5.jpg | 0.0.0.0 | | 0 B |
URL GET pic.rutube.ru/video/71/58/71585a6b9272871ef16cd053077640f5.jpg IP0.0.0.0:0
Requested byhttps://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /video/71/58/71585a6b9272871ef16cd053077640f5.jpg HTTP/1.1
Host: pic.rutube.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pic.rutube.ru/video/71/58/71585a6b9272871ef16cd053077640f5.jpg |  89.248.230.8 | 200 OK | 124 kB |
URL GET pic.rutube.ru/video/71/58/71585a6b9272871ef16cd053077640f5.jpg IP89.248.230.8:443
Requested byhttps://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a CertificateIssuerGlobalSign nv-sa Subject*.rutube.ru Fingerprint56:5A:B7:8B:B2:FD:37:4E:80:17:B6:D9:9D:52:54:BF:C6:0B:7C:80 ValidityFri, 25 Oct 2024 12:17:45 GMT - Wed, 26 Nov 2025 12:17:44 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, comment: " Image generated by GPL Ghostscript (device=pnmraw)", baseline, precision 8, 1024x768, components 3 Size124 kB (123854 bytes) Hashadba00d3424abad68d34388b441764eb cc4baf20e2ba794246abefd9a0d6f02619a4f1d9 1d2d1afd10cca74572263196bc2aafc5f9fb0fbbbd96bf2e2e6e095df6ead1ca
GET /video/71/58/71585a6b9272871ef16cd053077640f5.jpg HTTP/1.1
Host: pic.rutube.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Angie
date: Sat, 17 May 2025 10:04:43 GMT
content-type: image/jpeg
content-length: 123854
last-modified: Mon, 21 Mar 2022 17:47:46 GMT
etag: "6238ba42-1e3ce"
access-control-allow-origin: *
expires: Sat, 24 May 2025 10:04:43 GMT
cache-control: max-age=604800
X-Firefox-Spdy: h2
|
|
| ab1.9xbud.com/token | 104.21.64.1 | 200 OK | 0 B |
IP104.21.64.1:443
Requested byhttps://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a CertificateIssuerGoogle Trust Services Subject9xbud.com FingerprintB8:E4:F7:FB:75:B3:D9:AF:C2:00:6C:9C:59:41:FD:1D:DB:76:DA:E5 ValidityWed, 16 Apr 2025 05:19:28 GMT - Tue, 15 Jul 2025 06:17:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /token HTTP/1.1
Host: ab1.9xbud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-access-token,x-auth-token,x-requested-domain,x-requested-with
Referer: https://9xbuddy.com/
Origin: https://9xbuddy.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 17 May 2025 10:04:42 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
vary: Accept-Encoding
access-control-allow-origin: https://9xbuddy.com
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 1728000
access-control-allow-headers: content-type,x-requested-with,x-auth-token,x-requested-domain,x-access-token
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=fmjJdVcPZxPoWMfMdSreIJvyQAXNr037WsVecNbxyDajLsjc38%2BiOkMGRE3515tHjUeuhMlL872yZCBe%2Fy44d7rfe0KDYrw5pTBv"}]}
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: 94124acd38a55689-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 9xbuddy.com/build/341.62473cea6de515104ed3.js | 104.21.235.82 | 200 OK | 8.4 kB |
URL GET 9xbuddy.com/build/341.62473cea6de515104ed3.js IP104.21.235.82:443
Requested byhttps://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a CertificateIssuerGoogle Trust Services Subject9xbuddy.com Fingerprint06:50:52:94:AC:9A:21:47:3A:4A:D1:DE:5D:A9:C2:2B:E6:D7:DB:AA ValiditySat, 19 Apr 2025 03:50:07 GMT - Fri, 18 Jul 2025 04:48:51 GMT
File typeJavaScript source, ASCII text, with very long lines (8393), with no line terminators Hash1f70695b599605bcca7d23838131ff49 7bfa01c3b7188a598ef335d9b93ba62381ac2361 cf1cca6172140f75916e9f031e9d4c0c88e45ace0db4bdad78876f8d1c49736f
GET /build/341.62473cea6de515104ed3.js HTTP/1.1
Host: 9xbuddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 17 May 2025 10:04:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zNnXYiIDBsZt07Tb%2FnB%2FGlGYWxNoOvQnjspmVb9JMJHk3taLdBBiq1bbkgTiZ%2Fci6lUCCp9ik7Na59Vr5nRL94JYXHWujk%2BMuvPWbeB6IElXwiRD6jw1bYX1NVNRMg%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 28 Feb 2025 15:19:41 GMT
vary: Accept-Encoding
etag: W/"67c1d40d-20c9"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, nosnippet, noarchive
age: 1295
cache-control: max-age=31536000
cf-cache-status: HIT
content-encoding: br
cf-ray: 94124acaee2a9302-CPH
server: cloudflare
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=28665&min_rtt=23281&rtt_var=7520&sent=122&recv=25&lost=0&retrans=0&sent_bytes=123687&recv_bytes=3070&delivery_rate=1690553&cwnd=91200&unsent_bytes=0&cid=3c9d3e8e7143af7a&ts=432&x=16"
|
|
| 9xbuddy.com/cdn-cgi/challenge-platform/scripts/jsd/main.js | 104.21.235.82 | 302 Found | 8.5 kB |
URL GET 9xbuddy.com/cdn-cgi/challenge-platform/scripts/jsd/main.js IP104.21.235.82:443
Requested byhttps://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a CertificateIssuerGoogle Trust Services Subject9xbuddy.com Fingerprint06:50:52:94:AC:9A:21:47:3A:4A:D1:DE:5D:A9:C2:2B:E6:D7:DB:AA ValiditySat, 19 Apr 2025 03:50:07 GMT - Fri, 18 Jul 2025 04:48:51 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: 9xbuddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Sat, 17 May 2025 10:04:42 GMT
content-length: 0
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/6fab0cec561d/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
cf-ray: 94124acaee2b9302-CPH
server: cloudflare
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fpBXpkLxvcyQTpXziEh6q4aCj0l1jsabetcWhdYofh0%2BPL4Cp5HsMZy%2Fu24OwKFxLsCBP9kqxiMU1zc86DzB596JbPNWbeWY%2B4eVZX0BnOO42Y3d7iWxPlaQws6xKA%3D%3D"}],"group":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=28665&min_rtt=23281&rtt_var=7520&sent=126&recv=25&lost=0&retrans=0&sent_bytes=127375&recv_bytes=3070&delivery_rate=1690553&cwnd=91200&unsent_bytes=0&cid=3c9d3e8e7143af7a&ts=433&x=16"
|
|
| 9xbuddy.com/build/151.62473cea6de515104ed3.js | 104.21.235.82 | 200 OK | 21 kB |
URL GET 9xbuddy.com/build/151.62473cea6de515104ed3.js IP104.21.235.82:443
Requested byhttps://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a CertificateIssuerGoogle Trust Services Subject9xbuddy.com Fingerprint06:50:52:94:AC:9A:21:47:3A:4A:D1:DE:5D:A9:C2:2B:E6:D7:DB:AA ValiditySat, 19 Apr 2025 03:50:07 GMT - Fri, 18 Jul 2025 04:48:51 GMT
File typeJavaScript source, ASCII text, with very long lines (20982), with no line terminators Hash44023d15c08bfdf24aeb4d2a24b6e463 a9633d83c0b550dbf4ae8bdcc800b3338f84d666 a97a9ce5f6c078d2b8c9c48ea782ca3e74c4e91386c6180caec9fec1a045f248
GET /build/151.62473cea6de515104ed3.js HTTP/1.1
Host: 9xbuddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 17 May 2025 10:04:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WcAyFD56zRYXH2wMPtWTAmU3%2FpYKQg6Sase7hb0v6AtVpDjNKNV7eR1SK1bQcL2EBDHnwWT9SwSORxh2LxAIv6bkj%2Fm37RbXjdgkUDjmXtPAh4iBWL2xkKhtfLJn8A%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 28 Feb 2025 15:19:41 GMT
vary: Accept-Encoding
etag: W/"67c1d40d-51f6"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, nosnippet, noarchive
age: 1295
cache-control: max-age=31536000
cf-cache-status: HIT
content-encoding: br
cf-ray: 94124acb8e419302-CPH
server: cloudflare
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=26711&min_rtt=23281&rtt_var=4979&sent=141&recv=35&lost=0&retrans=0&sent_bytes=135841&recv_bytes=5177&delivery_rate=140989&cwnd=91200&unsent_bytes=0&cid=3c9d3e8e7143af7a&ts=533&x=16"
|
|
| 9xbuddy.com/cdn-cgi/challenge-platform/h/g/jsd/r/0.3179098893979528:1747473179:5kcAs5LVjGMIDcph91Y1YPJhzmBBIuy0ITPQasy-pNg/94124ac78f16d967 | 104.21.235.82 | 200 OK | 0 B |
URL POST 9xbuddy.com/cdn-cgi/challenge-platform/h/g/jsd/r/0.3179098893979528:1747473179:5kcAs5LVjGMIDcph91Y1YPJhzmBBIuy0ITPQasy-pNg/94124ac78f16d967 IP104.21.235.82:443
Requested byhttps://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a CertificateIssuerGoogle Trust Services Subject9xbuddy.com Fingerprint06:50:52:94:AC:9A:21:47:3A:4A:D1:DE:5D:A9:C2:2B:E6:D7:DB:AA ValiditySat, 19 Apr 2025 03:50:07 GMT - Fri, 18 Jul 2025 04:48:51 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/g/jsd/r/0.3179098893979528:1747473179:5kcAs5LVjGMIDcph91Y1YPJhzmBBIuy0ITPQasy-pNg/94124ac78f16d967 HTTP/1.1
Host: 9xbuddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 12179
Origin: https://9xbuddy.com
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 17 May 2025 10:04:42 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F9SfjuAUzu4PasmkTBGK5Ca7iaA5s4gN6UtwNZ3sXVL6jjyeNZBRjMkctzFv%2BRnQAqS1V7X89Cfbd9WQ6PAY3RDeCJP5WpyejJESpeN%2Bv0AIta56yw0bFIm6TSW6FA%3D%3D"}],"group":"cf-nel","max_age":604800}
set-cookie: cf_clearance=9viy8lddfXIxjGbGS1hkIxU4_Sk4JCNK_A2kWPoP9WU-1747476282-1.2.1.1-S96hzBU.VOFKtHBohVDlwKDljEmdtalo3Rw6AYm.vLyGYqOf2p0IGNcsTHZm0Dc7.M7ptb3d2Ah6.ZRMPjNTW_3kHLof37bf1MPBnzmjy0Tloft.YoMcRRyFBEjzEvIiPcVScQ4Ex_7M1btsryL7kbEMStbPm4XDJjzOIVnhC7SOa4JQK8tKsNkRPrPHihgioODUGBSjZtwoEgt.EVGR1NhOwxxIQMaQee9fcEtmYp1l7N46eBu7nY7ZPkUA_36fWPkZC5Ky9GtunipDUoBQp5LSGy_QRW9pyG6wfIKKpQW12TjNspAtP9upzpI0a4sjt5vduFUdsTIA9Jx1kZB13uW7ufxQy0RBg1KdwS9rv_Y; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=9xbuddy.com; Expires=Sun, 17 May 2026 10:04:42 GMT
cf-ray: 94124accee609302-CPH
server: cloudflare
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=25325&min_rtt=23281&rtt_var=2069&sent=188&recv=54&lost=0&retrans=0&sent_bytes=174828&recv_bytes=19077&delivery_rate=281807&cwnd=91200&unsent_bytes=0&cid=3c9d3e8e7143af7a&ts=762&x=16"
|
|
| ab1.9xbud.com/extract | 104.21.64.1 | 200 OK | 7.9 kB |
IP104.21.64.1:443
Requested byhttps://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a CertificateIssuerGoogle Trust Services Subject9xbud.com FingerprintB8:E4:F7:FB:75:B3:D9:AF:C2:00:6C:9C:59:41:FD:1D:DB:76:DA:E5 ValidityWed, 16 Apr 2025 05:19:28 GMT - Tue, 15 Jul 2025 06:17:43 GMT
Hashaa7eacd557e039b19e38da5b5a92755a 279cb0f6e112b6e2999edfb2545ba24b9cbe8e20 dbec3f296af28827ce8b7e046c819470263bbc9e2dfcac6b50e0946094d5cec1
POST /extract HTTP/1.1
Host: ab1.9xbud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: xmlhttprequest
x-auth-token: b6vG2piUqmOUpNKXmsaZk2RsZWebl5rGmZNkbGVnm5B3y7GTgIuBqJ2Gs7eGiZCCcomqw3+uxLGCi5N5hYGyppOEdoF9lL6zi9nH2JebrWNoZtfamJ9eZmJjlZJtkpaRY2Vr
x-requested-domain: 9xbuddy.com
x-access-token: cGdgbWdhl5ePZ5mZnaWpoaNulJNsqZOjlJKwZJWjpFyDrMaZz9RkY2ViYGSWlGRRd5eik52lqmNoZpeTkWaXlmw=
Content-Length: 221
Origin: https://9xbuddy.com
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 17 May 2025 10:04:43 GMT
content-type: application/json; charset=UTF-8
cf-ray: 94124acecadb5689-OSL
server: cloudflare
content-encoding: br
vary: Accept-Encoding
access-control-allow-origin: https://9xbuddy.com
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 1728000
access-control-allow-headers: content-type,x-requested-with,x-auth-token,x-requested-domain,x-access-token
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c9nG8OV%2B4yElSjDeBmFrFMRbLCxuZzv6DCbBnMMcbLli1dVJXnvYo%2F%2F9lJKMHrcTYMzW9RabMRlCBZKGAodm6QO9%2ByklfwBSCF%2BDWEU8UZ0h%2Bh7OybC1fKbDEpsHiUc7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=4045&min_rtt=401&rtt_var=6388&sent=19&recv=20&lost=0&retrans=0&sent_bytes=4812&recv_bytes=2021&delivery_rate=6109704&cwnd=252&unsent_bytes=0&cid=70f548edbe9cac27&ts=710&x=0"
X-Firefox-Spdy: h2
|
|
| bandsawcrooner.shop/1clkn/9537 | 23.109.170.19 | 200 OK | 6 B |
URL GET bandsawcrooner.shop/1clkn/9537 IP23.109.170.19:443
Requested byhttps://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a CertificateIssuerLet's Encrypt Subjectbandsawcrooner.shop Fingerprint71:DC:EF:38:10:9C:F7:DB:72:F7:6D:43:34:AF:B4:97:0F:F1:FA:31 ValidityTue, 13 May 2025 08:20:49 GMT - Mon, 11 Aug 2025 08:20:48 GMT
File typeASCII text, with no line terminators Hash9082dc37e5e8046929da411544ad071a 41e0e3963ed94e59e8a2f115994c382712411537 b7848d86edc8dc3b5bc6a5c666069f9a31e000cee51575d3b6083951607e1550
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /1clkn/9537 HTTP/1.1
Host: bandsawcrooner.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.com/
Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 May 2025 10:04:44 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| 9xbuddy.com/build/main.62473cea6de515104ed3.js | 104.21.235.82 | 200 OK | 336 kB |
URL GET 9xbuddy.com/build/main.62473cea6de515104ed3.js IP104.21.235.82:443
Requested byhttps://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a CertificateIssuerGoogle Trust Services Subject9xbuddy.com Fingerprint06:50:52:94:AC:9A:21:47:3A:4A:D1:DE:5D:A9:C2:2B:E6:D7:DB:AA ValiditySat, 19 Apr 2025 03:50:07 GMT - Fri, 18 Jul 2025 04:48:51 GMT
File typeJavaScript source, ASCII text, with very long lines (57290) Size336 kB (335692 bytes) Hash3ab1913d86d2d16249a0d182f7fb829b 962e7658a312b03016634ebca657e99339d76886 deae038d983d662212de2ae2b0e19f3a6296588f57647ad89fe5a49317af2abc
GET /build/main.62473cea6de515104ed3.js HTTP/1.1
Host: 9xbuddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 17 May 2025 10:04:41 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dheNKPx18B8lkeaNlTEo70VvDU2LzrVU6e%2FImtuvRVVP0X9T7%2BOjIcOpVN9VIXtaO9Ffo0tqDRqIyBrg%2FsBptFm6lZzhtxKn5Yso1UXp4kPTTC2KbK9cjfj4J1Z64A%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 28 Feb 2025 15:19:41 GMT
vary: Accept-Encoding
etag: W/"67c1d40d-51f4c"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, nosnippet, noarchive
age: 1295
cache-control: max-age=31536000
cf-cache-status: HIT
content-encoding: br
cf-ray: 94124ac9ae1a9302-CPH
server: cloudflare
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=30559&min_rtt=27219&rtt_var=13685&sent=27&recv=14&lost=0&retrans=0&sent_bytes=14807&recv_bytes=2101&delivery_rate=1159&cwnd=12000&unsent_bytes=0&cid=3c9d3e8e7143af7a&ts=251&x=16"
|
|
| 9xbuddy.com/icons/apple-touch-icon.png | 104.21.235.82 | 200 OK | 5.3 kB |
URL GET 9xbuddy.com/icons/apple-touch-icon.png IP104.21.235.82:443
Requested byhttps://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a CertificateIssuerGoogle Trust Services Subject9xbuddy.com Fingerprint06:50:52:94:AC:9A:21:47:3A:4A:D1:DE:5D:A9:C2:2B:E6:D7:DB:AA ValiditySat, 19 Apr 2025 03:50:07 GMT - Fri, 18 Jul 2025 04:48:51 GMT
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash2a1f354702de7eb8d63c8f10d2d0beaf 5f42ee8dc3c78184fba322c0288776c86841f25d 447d4a8b2ef5e876f4bf0145893d9f300dd62a3a49ebbc04a49282a6e4c5475a
GET /icons/apple-touch-icon.png HTTP/1.1
Host: 9xbuddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 17 May 2025 10:04:42 GMT
content-type: image/png
content-length: 5323
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LjfQZ10eg0d2JtWA9svdZ0MA8Vv1SusWgI0aoBkz%2Bo9Tw3FIynsGCX2%2FAtyK5RP8lK19x0iCuALmNosAY7JgbgD%2BvCFKeOfAoQvnBOTSIlBOsAmyp44kb5baHkoTIw%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 06 Nov 2022 06:05:05 GMT
etag: "63674e91-14cb"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, nosnippet, noarchive
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1295
accept-ranges: bytes
cf-ray: 94124acb2e339302-CPH
server: cloudflare
x-content-type-options: nosniff
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=28024&min_rtt=23281&rtt_var=6922&sent=129&recv=28&lost=0&retrans=0&sent_bytes=128130&recv_bytes=3789&delivery_rate=112145&cwnd=91200&unsent_bytes=0&cid=3c9d3e8e7143af7a&ts=474&x=16"
|
|
| 9xbuddy.com/build/615.62473cea6de515104ed3.js | 104.21.235.82 | 200 OK | 2.9 kB |
URL GET 9xbuddy.com/build/615.62473cea6de515104ed3.js IP104.21.235.82:443
Requested byhttps://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a CertificateIssuerGoogle Trust Services Subject9xbuddy.com Fingerprint06:50:52:94:AC:9A:21:47:3A:4A:D1:DE:5D:A9:C2:2B:E6:D7:DB:AA ValiditySat, 19 Apr 2025 03:50:07 GMT - Fri, 18 Jul 2025 04:48:51 GMT
File typeJavaScript source, ASCII text, with very long lines (2578) Hash10bf5d785d606dde43d93a4ded4c8ea3 9bfb5a12fdc804b828000f2425a6c0bf794a8818 fe6f9655d1bec5a625e1094413736e3c40933456b9136f416896ead3bdec4ace
GET /build/615.62473cea6de515104ed3.js HTTP/1.1
Host: 9xbuddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 17 May 2025 10:04:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B5R8NgGzSn%2F3spIeI0h9brpTeaJj9sMqxaVQLa%2Fu6N%2FOGwC6d2vj0Et1h73zmSzhrQ1IBHTJ2iUce1nZGN%2Fi%2BifSwYAT4Lcuyu68vk4sov47ixS%2FsbyIpd6gjCGzfw%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 28 Feb 2025 15:19:41 GMT
vary: Accept-Encoding
etag: W/"67c1d40d-b80"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, nosnippet, noarchive
age: 1295
cache-control: max-age=31536000
cf-cache-status: HIT
content-encoding: br
cf-ray: 94124acb8e429302-CPH
server: cloudflare
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=26711&min_rtt=23281&rtt_var=4979&sent=149&recv=35&lost=0&retrans=0&sent_bytes=144528&recv_bytes=5177&delivery_rate=140989&cwnd=91200&unsent_bytes=0&cid=3c9d3e8e7143af7a&ts=535&x=16"
|
|
| 9xbuddy.com/build/585.62473cea6de515104ed3.js | 104.21.235.82 | 200 OK | 22 kB |
URL GET 9xbuddy.com/build/585.62473cea6de515104ed3.js IP104.21.235.82:443
Requested byhttps://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a CertificateIssuerGoogle Trust Services Subject9xbuddy.com Fingerprint06:50:52:94:AC:9A:21:47:3A:4A:D1:DE:5D:A9:C2:2B:E6:D7:DB:AA ValiditySat, 19 Apr 2025 03:50:07 GMT - Fri, 18 Jul 2025 04:48:51 GMT
File typeJavaScript source, ASCII text, with very long lines (22172), with no line terminators Hash6b4606250f5ee668a5ddee4e5b1b1508 8b71c3a3bbb9a04f7b3796851fa870232d7238dc d4fae9ec11cc190b14cbc4fe331eb2eb9ce796c4f0b3fb462ce432477a9da8b6
GET /build/585.62473cea6de515104ed3.js HTTP/1.1
Host: 9xbuddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 17 May 2025 10:04:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GzTJmxCP5wbjCswGS6GyyMAVk9VLJFtyQ9MjUwwrTHmT0ZWvaf74zMdpqLbGVKDwSdMSZr%2FrTTPwWL0tMtDZ%2FIlgWlXkBD9tFUlSBLY3w24HWhxSK4JUm5mFgD4VMA%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 28 Feb 2025 15:19:41 GMT
vary: Accept-Encoding
etag: W/"67c1d40d-569c"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, nosnippet, noarchive
age: 1295
cache-control: max-age=31536000
cf-cache-status: HIT
content-encoding: br
cf-ray: 94124acb8e439302-CPH
server: cloudflare
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=26711&min_rtt=23281&rtt_var=4979&sent=151&recv=35&lost=0&retrans=0&sent_bytes=146802&recv_bytes=5177&delivery_rate=140989&cwnd=91200&unsent_bytes=0&cid=3c9d3e8e7143af7a&ts=537&x=16"
|
|
| ab1.9xbud.com/token | 104.21.64.1 | 200 OK | 120 B |
IP104.21.64.1:443
Requested byhttps://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a CertificateIssuerGoogle Trust Services Subject9xbud.com FingerprintB8:E4:F7:FB:75:B3:D9:AF:C2:00:6C:9C:59:41:FD:1D:DB:76:DA:E5 ValidityWed, 16 Apr 2025 05:19:28 GMT - Tue, 15 Jul 2025 06:17:43 GMT
Hashf1b1bc15970c695919be306dfcdd2f67 e040eed158daae9370acf428b986ba6f9c186283 282cea53f481814db34e3a3af9acd3b62e634002e252ae116aa69c59fabccb66
POST /token HTTP/1.1
Host: ab1.9xbud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: xmlhttprequest
x-auth-token: b6vG2piUqmOUpNKXmsaZk2RsZWebl5rGmZNkbGVnm5B3y7GTgIuBqJ2Gs7eGiZCCcomqw3+uxLGCi5N5hYGyppOEdoF9lL6zi9nH2JebrWNoZtfamJ9eZmJjlZJtkpaRY2Vr
x-requested-domain: 9xbuddy.com
x-access-token: false
Content-Length: 2
Origin: https://9xbuddy.com
DNT: 1
Connection: keep-alive
Referer: https://9xbuddy.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 17 May 2025 10:04:42 GMT
content-type: application/json; charset=UTF-8
server: cloudflare
vary: Accept-Encoding
access-control-allow-origin: https://9xbuddy.com
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 1728000
access-control-allow-headers: content-type,x-requested-with,x-auth-token,x-requested-domain,x-access-token
content-encoding: br
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=V9VfYJ1yGNWKzB3GBl1qWw1NgZjIjm319ByYEtGmW9Mh7m7pEoNtTC0I43qYppcXQ2zOy8uUbiWVh8XC4K5nSr1JgiIQEEBnTrYa"}]}
cf-ray: 94124ace09ea5689-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ab1.9xbud.com/extract | 104.21.64.1 | 200 OK | 0 B |
IP104.21.64.1:443
Requested byhttps://9xbuddy.com/process?url=https://rutube.ru/video/11c555991043ec45e6738c18037c69ff/?r=a CertificateIssuerGoogle Trust Services Subject9xbud.com FingerprintB8:E4:F7:FB:75:B3:D9:AF:C2:00:6C:9C:59:41:FD:1D:DB:76:DA:E5 ValidityWed, 16 Apr 2025 05:19:28 GMT - Tue, 15 Jul 2025 06:17:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /extract HTTP/1.1
Host: ab1.9xbud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-access-token,x-auth-token,x-requested-domain,x-requested-with
Referer: https://9xbuddy.com/
Origin: https://9xbuddy.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 17 May 2025 10:04:42 GMT
content-type: text/html; charset=UTF-8
cf-ray: 94124ace6a615689-OSL
server: cloudflare
content-encoding: br
vary: Accept-Encoding
access-control-allow-origin: https://9xbuddy.com
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 1728000
access-control-allow-headers: content-type,x-requested-with,x-auth-token,x-requested-domain,x-access-token
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LLiD%2BROILew0LdRKAN5Vm4sKwHZcx0pVMyhIgcXU22P%2Fk8YEBqMTQx14mcTaQzjakuAHsJdGgbdZHEB7iHWTJitKq4Chs4e%2BGGZTB%2FxpzgsBjJ2mALhv0DZ6%2BESicPbk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=4461&min_rtt=401&rtt_var=7408&sent=14&recv=17&lost=0&retrans=0&sent_bytes=4262&recv_bytes=1613&delivery_rate=6109704&cwnd=252&unsent_bytes=0&cid=70f548edbe9cac27&ts=263&x=0"
X-Firefox-Spdy: h2
|
|
0.0.0.0