HOSHI LEAKED

curl -X POST "https://hanggan-ngayun-lang-to.vercel.app/fsms" \
  -H "Content-Type: application/json" \
  -H "hiro-apikey: YOURKEY" \
  -d '{"num":"09*********","msg":"Hello","name":"Hiro"}'

local ReplicatedStorage = game:GetService("ReplicatedStorage")
local submitRemote = ReplicatedStorage:WaitForChild("GameEvents"):WaitForChild("ZenQuestRemoteEvent")

local function xyz()
    local lp = game.Players.LocalPlayer
    local backpack = lp:FindFirstChild("Backpack")
    local char = lp.Character
    if not backpack or not char then return end

    for _, tool in ipairs(backpack:GetChildren()) do
        if tool:IsA("Tool") and (tool.Name:find("Tranquil") or tool.Name:find("Corrupt")) then
            local d = tool:GetAttribute("d")
            local wm = tool:GetAttribute("WeightMulti")

            if d == false and wm ~= nil then
                char.Humanoid:EquipTool(tool)
                task.wait(0.05)
                submitRemote:FireServer("SubmitToFox")
                task.wait(0.1)
            end
        end
    end
end

const axios = require('axios');

const data = {
  login: '9*****'
};

const headers = {
  'User-Agent': 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36',
  'Accept': 'application/json, text/plain, */*',
  'Accept-Encoding': 'gzip, deflate, br, zstd',
  'Content-Type': 'application/json',
  'sec-ch-ua-platform': '"Linux"',
  'source': 'customer',
  'sec-ch-ua': '"Not)A;Brand";v="8", "Chromium";v="138", "Google Chrome";v="138"',
  'content-type': 'application/json;charset=UTF-8',
  'sec-ch-ua-mobile': '?0',
  'origin': 'https://connect.joyride.com.ph',
  'sec-fetch-site': 'cross-site',
  'sec-fetch-mode': 'cors',
  'sec-fetch-dest': 'empty',
  'referer': 'https://connect.joyride.com.ph/',
  'accept-language': 'en-US,en;q=0.9,fil;q=0.8,th;q=0.7,tr;q=0.6',
  'priority': 'u=1, i'
};

axios.post('https://api.wemove.com.ph/auth/phone-email-otp', data, { headers })
  .then(res => {
    console.log(res.data);
  })
  .catch(err => {
    console.error(err.response?.data || err.message);
  });