GET topcdn.site/js/xupload.js?v=3
404 Not Found 153 B URL GET topcdn.site/js/xupload.js?v=3
IP
Requested by https://topcdn.site/e/d9bsbch6122f/
Certificate IssuerGoogle Trust Services
Subjecttopcdn.site
Fingerprint57:D5:2D:92:D9:AA:91:EE:1A:1E:BD:68:96:DC:72:F6:C6:4A:B8:DB
ValiditySat, 07 Jun 2025 09:07:08 GMT - Fri, 05 Sep 2025 10:05:47 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 932da5a430ff6db1bc48425b567d56fa
e7e88023dbbc6346d354ffe9fb7db957888c2299
10174434dbe479c08b32ce3b42b70e7c6336647d29e4393483158d590d35c325
GET /js/xupload.js?v=3 HTTP/1.1
Host: topcdn.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://topcdn.site/e/d9bsbch6122f/
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sat, 21 Jun 2025 16:58:47 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cache-control: max-age=14400
cf-cache-status: EXPIRED
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=KHoeCHWXshA86miINlcgExw17unuppp0I%2FvrsvfvXp2XKLHWLzEj01ezUeAOntNRwV7GcVis%2F%2FuqMDRFb%2FBP4WEeGiWUVGXGMQ%3D%3D"}]}
content-encoding: br
cf-ray: 95350d7d281556a8-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 26efp.com/css/main.css?v=4
200 OK 49 kB URL GET 26efp.com/css/main.css?v=4
IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type assembler source, Unicode text, UTF-8 text
Hash 5a72a30cb5e2721cf7e36ebd9846a4f6
c03db81b75b19f829201db0d01d66ef189b8180a
b0341644a22e09291520c4c51eac70ed71928ee3066f40fcff257c582afac3b1
GET /css/main.css?v=4 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/d9bsbch6122f
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 16:58:48 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HQNHR5Ypx5E9mgAX4FcxQFtooHWIQAy63IRlGoovwb2iHE9IAEyGsvu%2B0dC0nsIWkJFuQqze%2FdnlDtmsPo5izmiYRPQKhZfa4w0Mkc8CrVpp6qbZBEEOVrjaRTQ%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 26 Sep 2024 18:06:54 GMT
etag: W/"66f5a2be-c03c"
expires: Thu, 26 Jun 2025 09:41:02 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 199065
cf-cache-status: HIT
content-encoding: br
cf-ray: 95350d82aa9256aa-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5925&min_rtt=3574&rtt_var=5596&sent=31&recv=32&lost=0&retrans=0&sent_bytes=4566&recv_bytes=3929&delivery_rate=753592&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=15480&unsent_bytes=0&cid=24d2859362461dd1&ts=142&inflight_dur=31&x=44"
GET 26efp.com/js/ls.js
200 OK 2.1 kB IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text, with very long lines (2063), with no line terminators
Hash f6784d7271569579cbc7e508fddb3fbb
61be0722316952e865893972791486e26961cdda
96f2f3c87be4a0582def1b5e1e9e19aa0529adb7fd9277cede56c1eefd906d01
GET /js/ls.js HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/d9bsbch6122f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 16:58:48 GMT
content-type: application/javascript; charset=utf-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rIxImG2Q7SVgQgHx2cVsSSfftuFMHO19UpTIoi9Lr3FHuQwkfH2kgklep3rMA7qVem0D%2BEdjzKhI9hHUF1B0Ad0xzFhzuw0Sx7H4HKvrGNow3ZhJG7SRXECBQOs%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 14 Feb 2023 11:28:54 GMT
etag: W/"63eb7076-80f"
expires: Thu, 26 Jun 2025 09:41:03 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 199064
cf-cache-status: HIT
content-encoding: br
cf-ray: 95350d82aa9656aa-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5925&min_rtt=3574&rtt_var=5596&sent=37&recv=32&lost=0&retrans=0&sent_bytes=8281&recv_bytes=3929&delivery_rate=753592&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=15480&unsent_bytes=0&cid=24d2859362461dd1&ts=143&inflight_dur=32&x=44"
GET be4235.rcr32.ams02.i8yz83pn.com/hls2/01/09295/d9bsbch6122f_h/master.m3u8?t=mpIZZwUPxJ_brKfijcx2_xcUXN9LAIXuE0I1vpVbkvI&s=1750525127&e=10800&f=46478399&srv=52&asn=50304&sp=4000&p=
200 OK 335 B URL GET be4235.rcr32.ams02.i8yz83pn.com/hls2/01/09295/d9bsbch6122f_h/master.m3u8?t=mpIZZwUPxJ_brKfijcx2_xcUXN9LAIXuE0I1vpVbkvI&s=1750525127&e=10800&f=46478399&srv=52&asn=50304&sp=4000&p=
IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerLet's Encrypt
Subjectbe4235.rcr32.ams02.i8yz83pn.com
Fingerprint08:2E:6E:50:1F:6C:3C:40:46:96:50:01:A4:0B:BA:92:B6:07:E2:72
ValidityMon, 09 Jun 2025 13:59:44 GMT - Sun, 07 Sep 2025 13:59:43 GMT
Hash 2192fccdb6aeb4266ba2ade62f6d1eef
801fb4105515186edae5c7263accc3b6d1b1800e
5741fde85445c64e65776532d483fafab365f4714d63424b98199242a274ab89
GET /hls2/01/09295/d9bsbch6122f_h/master.m3u8?t=mpIZZwUPxJ_brKfijcx2_xcUXN9LAIXuE0I1vpVbkvI&s=1750525127&e=10800&f=46478399&srv=52&asn=50304&sp=4000&p= HTTP/1.1
Host: be4235.rcr32.ams02.i8yz83pn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 21 Jun 2025 16:58:48 GMT
Content-Type: application/vnd.apple.mpegurl
Last-Modified: Sat, 21 Jun 2025 16:58:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Tue, 24 Jun 2025 16:58:48 GMT
Access-Control-Allow-Origin: *
Cache-Control: max-age=259200, no-store, no-cache
Sprint-Cache: BYPASS
Content-Encoding: gzip
OPTIONS txpwmpgveftnm.com/
200 OK 0 B IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerLet's Encrypt
Subjecttxpwmpgveftnm.com
FingerprintC9:9B:04:3E:3D:BC:5E:C0:A3:EC:85:2D:DF:E6:F3:9F:9B:27:EB:77
ValidityFri, 20 Jun 2025 11:03:06 GMT - Thu, 18 Sep 2025 11:03:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS / HTTP/1.1
Host: txpwmpgveftnm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: HEAD
Access-Control-Request-Headers: content-type
Referer: https://26efp.com/
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 16:58:49 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://26efp.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
GET my.rtmark.net/gid.js?userId=0081efb9abf94d9bf2e15401babd835b
200 OK 65 B URL GET my.rtmark.net/gid.js?userId=0081efb9abf94d9bf2e15401babd835b
IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerGoogle Trust Services
Subjectmy.rtmark.net
Fingerprint61:93:FB:BF:25:C3:CE:7B:CB:69:5D:87:04:AA:ED:1B:35:8D:44:82
ValidityFri, 02 May 2025 11:10:51 GMT - Thu, 31 Jul 2025 12:10:47 GMT
Hash c18d221a623a56c1b5c9553e92193f94
425af27744acc3930c124b6b1dd03d0a96d19ba8
3057c67e28c695e5d8fed02b2167ae8591c6df59ad2678faaeeb536dcbc6626e
GET /gid.js?userId=0081efb9abf94d9bf2e15401babd835b HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 16:58:49 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://26efp.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0081efb9abf94d9bf2e15401babd835b; expires=Sun, 21 Jun 2026 16:58:49 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 95350d8c09e71bfe-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET topcdn.site/js/jquery.js
404 Not Found 153 B IP
Requested by https://topcdn.site/e/d9bsbch6122f/
Certificate IssuerGoogle Trust Services
Subjecttopcdn.site
Fingerprint57:D5:2D:92:D9:AA:91:EE:1A:1E:BD:68:96:DC:72:F6:C6:4A:B8:DB
ValiditySat, 07 Jun 2025 09:07:08 GMT - Fri, 05 Sep 2025 10:05:47 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 932da5a430ff6db1bc48425b567d56fa
e7e88023dbbc6346d354ffe9fb7db957888c2299
10174434dbe479c08b32ce3b42b70e7c6336647d29e4393483158d590d35c325
GET /js/jquery.js HTTP/1.1
Host: topcdn.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://topcdn.site/e/d9bsbch6122f/
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sat, 21 Jun 2025 16:58:47 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cache-control: max-age=14400
cf-cache-status: EXPIRED
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Ex8njRYfHH8O1uFi%2B5RpD6JrcEiMe8QIEbaM0xxTrngQ43KE2pL2wPEgwuLkn%2F5Lk2zeJ8Q1KihRC8nxtolmfs36%2BJtncp0O6w%3D%3D"}]}
content-encoding: br
cf-ray: 95350d7d281156a8-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 26efp.com/js/jquery.js
200 OK 90 kB IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /js/jquery.js HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/d9bsbch6122f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 16:58:48 GMT
content-type: application/javascript; charset=utf-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QrK30WKZhHkU1vvzl8SOWtLPvIWSDvIeA%2FzDrD7Mdr4YzQu4pbd0ifthMR1zRdsOhn49bm3Xw%2FfaHGLIl6lVoqGzAbcYnk0kJNYfJN8BnQXkMVlSbYXQ62w4TEU%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
etag: W/"603e8adc-15d9d"
expires: Thu, 26 Jun 2025 09:41:02 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 199065
cf-cache-status: HIT
content-encoding: br
cf-ray: 95350d82aa9356aa-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5657&min_rtt=3574&rtt_var=4732&sent=52&recv=33&lost=0&retrans=0&sent_bytes=24846&recv_bytes=3973&delivery_rate=1472046&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=24430&unsent_bytes=0&cid=24d2859362461dd1&ts=149&inflight_dur=37&x=44"
GET 26efp.com/player/jw8_26/jwplayer.js?v=5.0.2
200 OK 111 kB URL GET 26efp.com/player/jw8_26/jwplayer.js?v=5.0.2
IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65511)
Size 111 kB (111441 bytes)
Hash f91de142eed44442bad231961488c5d0
ea6c79968011a5b59e444d792f7ab048a1f7e31d
b3031ee0f2674c203fe1400df12a96148c4bed344553fc9063c3846ba8466295
GET /player/jw8_26/jwplayer.js?v=5.0.2 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/d9bsbch6122f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 16:58:48 GMT
content-type: application/javascript; charset=utf-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ITRW2Qna8Xwbnd6aLixB4PCGK%2BNFb6feSxED3nULUcq5ioECJ0H8NrEUYJ12hQLQ3JduZxC3M4js5P%2BEeLBredwZ8J1ZNgCCezNuSY6U0u0y6gnsvcr%2BUEtmU7I%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 05 Apr 2024 14:58:43 GMT
etag: W/"661011a3-1b351"
expires: Thu, 26 Jun 2025 09:41:03 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 199064
cf-cache-status: HIT
content-encoding: br
cf-ray: 95350d82aa9856aa-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5925&min_rtt=3574&rtt_var=5596&sent=35&recv=32&lost=0&retrans=0&sent_bytes=7533&recv_bytes=3929&delivery_rate=753592&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=15480&unsent_bytes=0&cid=24d2859362461dd1&ts=143&inflight_dur=32&x=44"
GET 26efp.com/adcgi?id=82553663
404 Not Found 2.0 kB URL GET 26efp.com/adcgi?id=82553663
IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 78598915b8026c43308f5937da5c2e3e
2423083b2bfdfde76ba2079493f33d58097f05cf
b381f11049433f95c1fa966ba65661e7905b58e240ada758a49ab86dc7f86f27
GET /adcgi?id=82553663 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/d9bsbch6122f
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sat, 21 Jun 2025 16:58:52 GMT
content-type: text/html; charset=utf-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B48e7ff43zwl%2BEuoYLEQGZkCBDht%2BkTT8ZtGhTeRtX8ANVvKReAsldgpNsaOiMdjqiq9iW18lpilg1hzWqic%2Fn14yFwtMDvxMT5dA84UKDCsAkD3B1kpBE2UHUA%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 24 Jan 2025 17:58:42 GMT
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 95350d9dbb3d56aa-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1259&min_rtt=0&rtt_var=939&sent=378&recv=78&lost=7&retrans=7&sent_bytes=380487&recv_bytes=7452&delivery_rate=17498833&ss_exit_cwnd=24430&ss_exit_reason=2&cwnd=20707&unsent_bytes=0&cid=24d2859362461dd1&ts=4600&inflight_dur=151&x=44"
GET topcdn.site/js/ls.js
404 Not Found 153 B IP
Requested by https://topcdn.site/e/d9bsbch6122f/
Certificate IssuerGoogle Trust Services
Subjecttopcdn.site
Fingerprint57:D5:2D:92:D9:AA:91:EE:1A:1E:BD:68:96:DC:72:F6:C6:4A:B8:DB
ValiditySat, 07 Jun 2025 09:07:08 GMT - Fri, 05 Sep 2025 10:05:47 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 932da5a430ff6db1bc48425b567d56fa
e7e88023dbbc6346d354ffe9fb7db957888c2299
10174434dbe479c08b32ce3b42b70e7c6336647d29e4393483158d590d35c325
GET /js/ls.js HTTP/1.1
Host: topcdn.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://topcdn.site/e/d9bsbch6122f/
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sat, 21 Jun 2025 16:58:47 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cache-control: max-age=14400
cf-cache-status: EXPIRED
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=FHxO2lCRTgtfjWvZTrBQ3007IHAOibYQh8VJ%2BVCJNJEeqRKf0hOyYx%2BQiQmb2C30DZNFhAqRyRT71KgM%2F6MEr%2FMTodVCb8rK8A%3D%3D"}]}
content-encoding: br
cf-ray: 95350d7d281a56a8-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 26efp.com/bkg/d9bsbch6122f
200 OK 39 kB URL GET 26efp.com/bkg/d9bsbch6122f
IP
Requested by https://topcdn.site/e/d9bsbch6122f/
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text, with very long lines (28019)
Hash d87ef75339ddbbafbc965364717822d5
dec2bc30584a388d3a653104b4a44a7141837961
5b3b09561a85e872733a9a24801f5533afe333474f0b047e475ec6ffa32231b7
GET /bkg/d9bsbch6122f HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://topcdn.site/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 16:58:47 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Fri, 20 Jun 2025 16:58:47 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=PemiJonlUAwyOMav%2F1hVXAMZUulCrdkITteQVH3FY99WX2e9fYP0QsM3%2FfGsSRCCOPiwuAG8xhTWMRlSUNhypiTfPD%2Fkc%2Fo%3D"}]}
content-encoding: br
set-cookie: lang=1; HttpOnly; Path=/; Domain=26efp.com
cf-ray: 95350d7efb9fb4f7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET filemoon.to/assets/images/favicon/apple-touch-icon.png
200 OK 15 kB URL GET filemoon.to/assets/images/favicon/apple-touch-icon.png
IP
Requested by https://topcdn.site/e/d9bsbch6122f/
Certificate IssuerLet's Encrypt
Subjectfilemoon.to
FingerprintF2:0A:8B:C2:E1:42:0D:4C:55:54:FA:CB:9F:84:EB:0C:14:87:B8:CD
ValidityWed, 18 Jun 2025 09:33:36 GMT - Tue, 16 Sep 2025 09:33:35 GMT
File type PNG image data, 360 x 158, 8-bit/color RGBA, non-interlaced
Hash 89a3d82162fc1f11d1ffa5bd73ecff9a
6765810ff0ee7f8c1c5d9b1f419616cc9ce500c8
83e21507727c12df8021db54c02a2bdd8fcaf54409e9dfd575c955698bcecbd0
GET /assets/images/favicon/apple-touch-icon.png HTTP/1.1
Host: filemoon.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://topcdn.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=WXJvkVvnoPqmvVlr; Domain=.filemoon.to; Path=/; Expires=Sat, 21-Jun-2025 17:18:47 GMT
__ddg10_=1750525127; Domain=.filemoon.to; Path=/; Expires=Sat, 21-Jun-2025 17:18:47 GMT
__ddg9_=91.90.42.154; Domain=.filemoon.to; Path=/; Expires=Sat, 21-Jun-2025 17:18:47 GMT
__ddg1_=8V5JqiPyOX0pvxmvhPFy; Domain=.filemoon.to; HttpOnly; Path=/; Expires=Sun, 21-Jun-2026 16:58:47 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 17 Jun 2025 19:29:47 GMT
content-type: image/png
content-length: 14840
last-modified: Thu, 07 Apr 2022 13:15:48 GMT
etag: "624ee404-39f8"
expires: Tue, 24 Jun 2025 19:29:47 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
accept-ranges: bytes
age: 336540
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
GET 26efp.com/js/xupload.js?v=3
200 OK 11 kB URL GET 26efp.com/js/xupload.js?v=3
IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text
Hash 200f7636e884860eed563210f5125c16
3312a1318afed0df1fa4a93cac2016165c651f28
01cd57ece4bf51c9db1a880a36145f8bda86634cf6b0cb69e6f9e7f187c107bd
GET /js/xupload.js?v=3 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/d9bsbch6122f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 16:58:48 GMT
content-type: application/javascript; charset=utf-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ds0v6JGorHEk0zC3TQPoykPMP7gyvlMK4y9dLtqF68NjE%2B%2B%2Fsd%2Fn5FWf3vds%2Fxs1nyrPDO9yOsOv2OUIgnqafbxm15rG5eZuK0lEWW8CWF1vSzwsunLbyIelgDQ%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 27 Mar 2025 07:57:44 GMT
etag: W/"67e504f8-2b52"
expires: Thu, 26 Jun 2025 09:42:08 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 198999
cf-cache-status: HIT
content-encoding: br
cf-ray: 95350d82aa9456aa-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5925&min_rtt=3574&rtt_var=5596&sent=37&recv=32&lost=0&retrans=0&sent_bytes=8281&recv_bytes=3929&delivery_rate=753592&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=15480&unsent_bytes=0&cid=24d2859362461dd1&ts=143&inflight_dur=32&x=44"
GET videothumbs.me/d9bsbch6122f.jpg
200 OK 34 kB URL GET videothumbs.me/d9bsbch6122f.jpg
IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerGoogle Trust Services
Subjectvideothumbs.me
FingerprintB9:B4:8A:B0:ED:DA:7E:36:8C:CA:20:F8:25:8B:1F:49:B1:E5:91:87
ValidityMon, 12 May 2025 10:17:40 GMT - Sun, 10 Aug 2025 11:15:40 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc59.32.100", baseline, precision 8, 720x405, components 3
Hash 9140154196efb4347f5f954256ef7725
3eae75d980bb0febaaf1fba20a83b83551db1f78
2198b5774df0b18a64fbb7e9f0ce19e412d91a9c78b1851b48e32e19f29d823d
GET /d9bsbch6122f.jpg HTTP/1.1
Host: videothumbs.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 16:58:48 GMT
content-type: image/jpeg
content-length: 33897
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
last-modified: Sat, 21 Jun 2025 07:05:20 GMT
etag: "685659b0-8469"
expires: Sat, 05 Jul 2025 07:42:22 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 16107
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2BK4GzaGgYctztURk8ppQIopdMJmugsjrgnSQWSGsN2QvGVtqNWSpUlfjmum6L1CgeWkpDBqMJ4pfu4GmVppkKnNC49mEewn25MBGKQ%3D%3D"}]}
cf-ray: 95350d86f8fe0b4d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
OPTIONS ccg90.com/wrr?z=9254409&p_rid=5e364149-dc20-4d1f-a74d-ac7dc99a6521&rb=Js5H3pTPgfBvBAmTOplSiSi7WtURAaiE_7lHxEF7my6cP00hF1Sv8ooLFDTTLpGsq_uBwi4eoOUi_X2zXb-XuVMgP6KeiQ56SLt68GYywCpLbxi3fgBKQUsWQaqMteymKmShAf-v7WXNo6nEHOwwOZds26XCZY1pr3vtVxOsSayiFxF6O4tcf1JoGQJnEze4L_dCNrw9uFO8O6WRyFRlofAJkQ1cXg2qxzrw56OCwTCNVmxhKrSE9A72Wd_GMTjNhcAHShNwQE7x0RqKiBf8903H3a5YApAx&dmn=ccg90.com&userId=0081efb9abf94d9bf2e15401babd835b
204 No Content 0 B URL OPTIONS ccg90.com/wrr?z=9254409&p_rid=5e364149-dc20-4d1f-a74d-ac7dc99a6521&rb=Js5H3pTPgfBvBAmTOplSiSi7WtURAaiE_7lHxEF7my6cP00hF1Sv8ooLFDTTLpGsq_uBwi4eoOUi_X2zXb-XuVMgP6KeiQ56SLt68GYywCpLbxi3fgBKQUsWQaqMteymKmShAf-v7WXNo6nEHOwwOZds26XCZY1pr3vtVxOsSayiFxF6O4tcf1JoGQJnEze4L_dCNrw9uFO8O6WRyFRlofAJkQ1cXg2qxzrw56OCwTCNVmxhKrSE9A72Wd_GMTjNhcAHShNwQE7x0RqKiBf8903H3a5YApAx&dmn=ccg90.com&userId=0081efb9abf94d9bf2e15401babd835b
IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerLet's Encrypt
Subjectccg90.com
Fingerprint56:09:8B:A2:B0:CC:2D:94:BB:34:A2:E9:A2:FD:C7:53:D9:F4:20:83
ValidityWed, 23 Apr 2025 09:55:55 GMT - Tue, 22 Jul 2025 09:55:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wrr?z=9254409&p_rid=5e364149-dc20-4d1f-a74d-ac7dc99a6521&rb=Js5H3pTPgfBvBAmTOplSiSi7WtURAaiE_7lHxEF7my6cP00hF1Sv8ooLFDTTLpGsq_uBwi4eoOUi_X2zXb-XuVMgP6KeiQ56SLt68GYywCpLbxi3fgBKQUsWQaqMteymKmShAf-v7WXNo6nEHOwwOZds26XCZY1pr3vtVxOsSayiFxF6O4tcf1JoGQJnEze4L_dCNrw9uFO8O6WRyFRlofAJkQ1cXg2qxzrw56OCwTCNVmxhKrSE9A72Wd_GMTjNhcAHShNwQE7x0RqKiBf8903H3a5YApAx&dmn=ccg90.com&userId=0081efb9abf94d9bf2e15401babd835b HTTP/1.1
Host: ccg90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://26efp.com/
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Sat, 21 Jun 2025 16:58:50 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://26efp.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
GET topcdn.site/e/d9bsbch6122f/
200 OK 1.3 kB URL User Request GET topcdn.site/e/d9bsbch6122f/
IP
Certificate IssuerGoogle Trust Services
Subjecttopcdn.site
Fingerprint57:D5:2D:92:D9:AA:91:EE:1A:1E:BD:68:96:DC:72:F6:C6:4A:B8:DB
ValiditySat, 07 Jun 2025 09:07:08 GMT - Fri, 05 Sep 2025 10:05:47 GMT
File type HTML document, ASCII text
Hash 0910b4808751eb0ed7ec3beb512b511f
709454fb3d3a47b607f038d3e77ec7911f7ab6ab
67f51bb66c2a89cbc1341e0e9be8e45ecd23c311e297f318fcd4fb04f260070f
GET /e/d9bsbch6122f/ HTTP/1.1
Host: topcdn.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 16:58:46 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Fri, 20 Jun 2025 16:58:46 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=rQi3smUtMFTe151M4yBlAknR5d9j%2BvuwkW6CuAI94Eu3kkKmbrJe8dv3SebEdQzmnzAZwQkqCyukya1lFiLRu4LTk1wAHP1tEg%3D%3D"}]}
content-encoding: br
set-cookie: lang=1; HttpOnly; Path=/; Domain=topcdn.site
cf-ray: 95350d78dc1656a8-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET filemoon.to/assets/images/favicon/favicon-16x16.png
200 OK 370 B URL GET filemoon.to/assets/images/favicon/favicon-16x16.png
IP
Requested by https://topcdn.site/e/d9bsbch6122f/
Certificate IssuerLet's Encrypt
Subjectfilemoon.to
FingerprintF2:0A:8B:C2:E1:42:0D:4C:55:54:FA:CB:9F:84:EB:0C:14:87:B8:CD
ValidityWed, 18 Jun 2025 09:33:36 GMT - Tue, 16 Sep 2025 09:33:35 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Hash 1890e941734d87980f46cd0d6b83c3f6
999a3546ab4605a3988801f45b77df2df0773e51
fa5d0d05df5fde625a3d244297de45ca7d82efd60e89646730e8cffaafac7049
GET /assets/images/favicon/favicon-16x16.png HTTP/1.1
Host: filemoon.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://topcdn.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=lUT3xEEHuRlil9qU; Domain=.filemoon.to; Path=/; Expires=Sat, 21-Jun-2025 17:18:47 GMT
__ddg10_=1750525127; Domain=.filemoon.to; Path=/; Expires=Sat, 21-Jun-2025 17:18:47 GMT
__ddg9_=91.90.42.154; Domain=.filemoon.to; Path=/; Expires=Sat, 21-Jun-2025 17:18:47 GMT
__ddg1_=xNGIywoCXOWoGIsKNaay; Domain=.filemoon.to; HttpOnly; Path=/; Expires=Sun, 21-Jun-2026 16:58:47 GMT
content-security-policy: upgrade-insecure-requests;
date: Fri, 20 Jun 2025 14:45:21 GMT
content-type: image/png
content-length: 370
last-modified: Tue, 10 May 2022 16:16:39 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
accept-ranges: bytes
ddg-cache-status: HIT,MISS
etag: "627a8fe7-172"
expires: Fri, 27 Jun 2025 14:45:21 GMT
age: 94406
X-Firefox-Spdy: h2
GET 26efp.com/js/dnsads.js?dfp=1&ad_code=2&adsrc=3
200 OK 38 B URL GET 26efp.com/js/dnsads.js?dfp=1&ad_code=2&adsrc=3
IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type ASCII text, with CRLF line terminators
Hash 99eccae6afa72c589ae54b5c3890282a
0f102f8f5b556635de65d16cf70fa8269c6761b4
b74a58316385de04b054737776e71c160cd60d2d01b5440b32c21651fb0ab8d3
GET /js/dnsads.js?dfp=1&ad_code=2&adsrc=3 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/d9bsbch6122f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 16:58:48 GMT
content-type: application/javascript; charset=utf-8
content-length: 38
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7BbaBJUOJzb4MJjP0U6DEgNf3eNzmqirVgLxP%2FSZta3hQi2lj%2BR9MkW6EV%2FZpZ2v4%2FRVAPzDzLFKw0RKDwMg7%2BuSHlldBfdiaHMiSXoQTM6wUzJrFYfyUmuFrEE%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 13 Sep 2021 15:50:14 GMT
etag: "613f7336-26"
expires: Thu, 26 Jun 2025 09:41:04 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
accept-ranges: bytes
age: 199063
cf-cache-status: HIT
cf-ray: 95350d82ba9956aa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3579&min_rtt=194&rtt_var=4236&sent=76&recv=37&lost=0&retrans=0&sent_bytes=50814&recv_bytes=4146&delivery_rate=4125620&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=24430&unsent_bytes=0&cid=24d2859362461dd1&ts=153&inflight_dur=41&x=44"
HEAD 26efp.com/bkg/d9bsbch6122f
200 OK 0 B URL HEAD 26efp.com/bkg/d9bsbch6122f
IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /bkg/d9bsbch6122f HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/d9bsbch6122f
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 16:58:48 GMT
content-type: text/html; charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1IYh20rE89jMSB5minZz0zGfydeEaYQEbS80gllEGgsSZPvz0vAmIeNXZMYWJeybFFjrco9LfuNj3TwmAZxWPQzNjtHEDyI5ySXB8Te2JJGkxY2rEQb9Tlr0Wf4%3D"}],"group":"cf-nel","max_age":604800}
expires: Fri, 20 Jun 2025 16:58:48 GMT
set-cookie: lang=1; domain=.26efp.com; path=/; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 95350d83ba9d56aa-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1122&min_rtt=0&rtt_var=884&sent=375&recv=76&lost=7&retrans=7&sent_bytes=379753&recv_bytes=7143&delivery_rate=17498833&ss_exit_cwnd=24430&ss_exit_reason=2&cwnd=20707&unsent_bytes=0&cid=24d2859362461dd1&ts=683&inflight_dur=129&x=44"
GET 26efp.com/player/jw8_26/jwplayer.core.controls.js?v=2
200 OK 327 kB URL GET 26efp.com/player/jw8_26/jwplayer.core.controls.js?v=2
IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text, with very long lines (65143)
Size 327 kB (326903 bytes)
Hash fee77850b6b254569cf03f43a4dfdde4
35841d306d3404fbef6825371ffdbcd992ade913
50b22ddf7e9cf49716e33660cc9de3c2bbf3cb90f203d8af93810f8f97bdee3f
GET /player/jw8_26/jwplayer.core.controls.js?v=2 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/d9bsbch6122f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 16:58:48 GMT
content-type: application/javascript; charset=utf-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mUzNLpoSk2oFW4ARFAd3cmq2cl9Tm3Rkjj93gLXZmY5jaFROKIkZMQE%2BLwA8o%2Fy%2B99xRiIvlD8o8vCxCp%2FirPkznvhG%2Bjs588X0IhDjnh%2FQvHfeBPTsZuyVZQ5E%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 03 Apr 2024 09:09:34 GMT
etag: W/"660d1cce-4fcf7"
expires: Thu, 26 Jun 2025 09:41:04 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 199063
cf-cache-status: HIT
content-encoding: br
cf-ray: 95350d849aa156aa-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4099&min_rtt=194&rtt_var=4770&sent=164&recv=51&lost=0&retrans=0&sent_bytes=142820&recv_bytes=5917&delivery_rate=15348466&ss_exit_cwnd=24430&ss_exit_reason=2&cwnd=26768&unsent_bytes=0&cid=24d2859362461dd1&ts=437&inflight_dur=95&x=44"
POST ccg90.com/wrr?z=9254409&p_rid=5e364149-dc20-4d1f-a74d-ac7dc99a6521&rb=Js5H3pTPgfBvBAmTOplSiSi7WtURAaiE_7lHxEF7my6cP00hF1Sv8ooLFDTTLpGsq_uBwi4eoOUi_X2zXb-XuVMgP6KeiQ56SLt68GYywCpLbxi3fgBKQUsWQaqMteymKmShAf-v7WXNo6nEHOwwOZds26XCZY1pr3vtVxOsSayiFxF6O4tcf1JoGQJnEze4L_dCNrw9uFO8O6WRyFRlofAJkQ1cXg2qxzrw56OCwTCNVmxhKrSE9A72Wd_GMTjNhcAHShNwQE7x0RqKiBf8903H3a5YApAx&dmn=ccg90.com&userId=0081efb9abf94d9bf2e15401babd835b
204 No Content 0 B URL POST ccg90.com/wrr?z=9254409&p_rid=5e364149-dc20-4d1f-a74d-ac7dc99a6521&rb=Js5H3pTPgfBvBAmTOplSiSi7WtURAaiE_7lHxEF7my6cP00hF1Sv8ooLFDTTLpGsq_uBwi4eoOUi_X2zXb-XuVMgP6KeiQ56SLt68GYywCpLbxi3fgBKQUsWQaqMteymKmShAf-v7WXNo6nEHOwwOZds26XCZY1pr3vtVxOsSayiFxF6O4tcf1JoGQJnEze4L_dCNrw9uFO8O6WRyFRlofAJkQ1cXg2qxzrw56OCwTCNVmxhKrSE9A72Wd_GMTjNhcAHShNwQE7x0RqKiBf8903H3a5YApAx&dmn=ccg90.com&userId=0081efb9abf94d9bf2e15401babd835b
IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerLet's Encrypt
Subjectccg90.com
Fingerprint56:09:8B:A2:B0:CC:2D:94:BB:34:A2:E9:A2:FD:C7:53:D9:F4:20:83
ValidityWed, 23 Apr 2025 09:55:55 GMT - Tue, 22 Jul 2025 09:55:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wrr?z=9254409&p_rid=5e364149-dc20-4d1f-a74d-ac7dc99a6521&rb=Js5H3pTPgfBvBAmTOplSiSi7WtURAaiE_7lHxEF7my6cP00hF1Sv8ooLFDTTLpGsq_uBwi4eoOUi_X2zXb-XuVMgP6KeiQ56SLt68GYywCpLbxi3fgBKQUsWQaqMteymKmShAf-v7WXNo6nEHOwwOZds26XCZY1pr3vtVxOsSayiFxF6O4tcf1JoGQJnEze4L_dCNrw9uFO8O6WRyFRlofAJkQ1cXg2qxzrw56OCwTCNVmxhKrSE9A72Wd_GMTjNhcAHShNwQE7x0RqKiBf8903H3a5YApAx&dmn=ccg90.com&userId=0081efb9abf94d9bf2e15401babd835b HTTP/1.1
Host: ccg90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://26efp.com/
content-type: application/json
Content-Length: 2649
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Sat, 21 Jun 2025 16:58:50 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://26efp.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
GET topcdn.site/js/xupload.js?v=3
404 Not Found 153 B URL GET topcdn.site/js/xupload.js?v=3
IP
Requested by https://topcdn.site/e/d9bsbch6122f/
Certificate IssuerGoogle Trust Services
Subjecttopcdn.site
Fingerprint57:D5:2D:92:D9:AA:91:EE:1A:1E:BD:68:96:DC:72:F6:C6:4A:B8:DB
ValiditySat, 07 Jun 2025 09:07:08 GMT - Fri, 05 Sep 2025 10:05:47 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 932da5a430ff6db1bc48425b567d56fa
e7e88023dbbc6346d354ffe9fb7db957888c2299
10174434dbe479c08b32ce3b42b70e7c6336647d29e4393483158d590d35c325
GET /js/xupload.js?v=3 HTTP/1.1
Host: topcdn.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://topcdn.site/e/d9bsbch6122f/
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sat, 21 Jun 2025 16:58:47 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b43%2B%2FfbLGKmC5RAbeakNv0drTelMo1Q2hwz7Mn8C88hEy37RSJ23vM%2FZcy8iiGAC2GZ0fwiMah1TN%2BJMnQqw42aHErGQPvhK5IQnjVya%2Bm0%2Fd4%2FT75CdvzCacr8F1g%3D%3D"}],"group":"cf-nel","max_age":604800}
age: 0
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 95350d7e5bb60b3d-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1247&min_rtt=462&rtt_var=753&sent=302&recv=381&lost=0&retrans=0&sent_bytes=19657&recv_bytes=20605&delivery_rate=619727&ss_exit_cwnd=14904&ss_exit_reason=2&cwnd=12000&unsent_bytes=0&cid=642fe45eefecbee3&ts=489&inflight_dur=34&x=44"
GET 26efp.com/js/bafsd.js
200 OK 14 kB IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text, with CRLF line terminators
Hash c2432aca90e92e0370d2ded2545eb1fa
8f1ae40f7dc9c4ccfcb91d04530a1f072e9d06eb
89c40275bddb7257d519bda010de1c4df70a30b5f84be325f2ae53168f276cb5
GET /js/bafsd.js HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/d9bsbch6122f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 16:58:48 GMT
content-type: application/javascript; charset=utf-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KdMz%2F56X95tlnWcJRfAX9PZM53s9wtS1fBNukTrspHgwozwWjKe39yxtNN6tg06tONsyC2BAYp97tw3%2BmCR%2FsLPWSBfE%2B%2FaLfX05oGsxWPV60JeBjoL7y6DE%2Fcs%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 04 Oct 2024 05:52:43 GMT
etag: W/"66ff82ab-358a"
expires: Thu, 26 Jun 2025 09:41:03 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 199064
cf-cache-status: HIT
content-encoding: br
cf-ray: 95350d82aa9756aa-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4532&min_rtt=673&rtt_var=4624&sent=60&recv=35&lost=0&retrans=0&sent_bytes=31614&recv_bytes=4059&delivery_rate=2391640&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=24430&unsent_bytes=0&cid=24d2859362461dd1&ts=151&inflight_dur=39&x=44"
GET 26efp.com/assets/css/jw8-theme.css?v=3.0.6
200 OK 25 kB URL GET 26efp.com/assets/css/jw8-theme.css?v=3.0.6
IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type ASCII text, with very long lines (938), with CRLF line terminators
Hash 218f1af32c959506efe281f39309d9a5
948fbcdba4275e13fc3e469a04df2d727aabdf4a
5425c5e4dfa36e386ee465a9fe20f61290bcd377fe3fd950164c5c6e16301593
GET /assets/css/jw8-theme.css?v=3.0.6 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/d9bsbch6122f
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 16:58:48 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TdJiqubrCV8HubmzcRqqXQGwtwVZsttzy0dV2V6VDB89mONELOm2IGfB75PT2Xd85L9X%2B%2Fx496clCBKEtjSk%2BpDM33OdR4zkQK8f8soqrwCX%2Fm94Nq%2B4%2FRLuVkA%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 03 Apr 2024 15:50:39 GMT
etag: W/"660d7acf-62a2"
expires: Thu, 26 Jun 2025 09:41:05 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 199063
cf-cache-status: HIT
content-encoding: br
cf-ray: 95350d849aa256aa-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3232&min_rtt=194&rtt_var=4198&sent=193&recv=53&lost=0&retrans=0&sent_bytes=174677&recv_bytes=6005&delivery_rate=15348466&ss_exit_cwnd=24430&ss_exit_reason=2&cwnd=26843&unsent_bytes=0&cid=24d2859362461dd1&ts=440&inflight_dur=98&x=44"
GET 26efp.com/player/jw8_26/provider.hlsjs.js?v=2
200 OK 423 kB URL GET 26efp.com/player/jw8_26/provider.hlsjs.js?v=2
IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text, with very long lines (65143)
Size 423 kB (422959 bytes)
Hash 0f95e38aa7bb0943693b51bd6a7deed0
26c89f76894108f76ad23af32ecc6b1e708993ba
1b1263b7061aaca7fe0b69168b16cb2401a7fe2ada08ccfdd373ee06c7d125b1
GET /player/jw8_26/provider.hlsjs.js?v=2 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/d9bsbch6122f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 16:58:48 GMT
content-type: application/javascript; charset=utf-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RJfSzhF44subWSCWje7cvGvFXBW%2BYbvhR9tMIGbjn7hBKQgN2vcDErFV%2B6NOKYOi%2B7pE3r4xlEoTLIvW9TRvZImBo%2BECX8%2BjyCnEDXjAmnknyrv4yOTzzrNUxCI%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 05 Apr 2024 14:57:50 GMT
etag: W/"6610116e-6742f"
expires: Thu, 26 Jun 2025 09:41:05 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 199062
cf-cache-status: HIT
content-encoding: br
cf-ray: 95350d849aa356aa-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3232&min_rtt=194&rtt_var=4198&sent=209&recv=53&lost=0&retrans=0&sent_bytes=191193&recv_bytes=6005&delivery_rate=15348466&ss_exit_cwnd=24430&ss_exit_reason=2&cwnd=26843&unsent_bytes=0&cid=24d2859362461dd1&ts=443&inflight_dur=99&x=44"
GET be4235.rcr32.ams02.i8yz83pn.com/hls2/01/09295/d9bsbch6122f_h/index-v1-a1.m3u8?t=mpIZZwUPxJ_brKfijcx2_xcUXN9LAIXuE0I1vpVbkvI&s=1750525127&e=10800&f=46478399&srv=52&asn=50304&sp=4000&p=
200 OK 35 kB URL GET be4235.rcr32.ams02.i8yz83pn.com/hls2/01/09295/d9bsbch6122f_h/index-v1-a1.m3u8?t=mpIZZwUPxJ_brKfijcx2_xcUXN9LAIXuE0I1vpVbkvI&s=1750525127&e=10800&f=46478399&srv=52&asn=50304&sp=4000&p=
IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerLet's Encrypt
Subjectbe4235.rcr32.ams02.i8yz83pn.com
Fingerprint08:2E:6E:50:1F:6C:3C:40:46:96:50:01:A4:0B:BA:92:B6:07:E2:72
ValidityMon, 09 Jun 2025 13:59:44 GMT - Sun, 07 Sep 2025 13:59:43 GMT
Hash 98eeb8152fc283d365cd275f0da35a6e
fbc97cd35a5a652f153c8371bd6d0282f58bc944
b8cdaa66d91bc0b09ebe38d94df6c156140e63926f74ed52abaa3a658e137efb
GET /hls2/01/09295/d9bsbch6122f_h/index-v1-a1.m3u8?t=mpIZZwUPxJ_brKfijcx2_xcUXN9LAIXuE0I1vpVbkvI&s=1750525127&e=10800&f=46478399&srv=52&asn=50304&sp=4000&p= HTTP/1.1
Host: be4235.rcr32.ams02.i8yz83pn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 21 Jun 2025 16:58:48 GMT
Content-Type: application/vnd.apple.mpegurl
Last-Modified: Sat, 21 Jun 2025 16:58:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Tue, 24 Jun 2025 16:58:48 GMT
Access-Control-Allow-Origin: *
Cache-Control: max-age=259200, no-store, no-cache
Sprint-Cache: BYPASS
Content-Encoding: gzip
GET topcdn.site/css/main.css?v=4
200 OK 49 kB URL GET topcdn.site/css/main.css?v=4
IP
Requested by https://topcdn.site/e/d9bsbch6122f/
Certificate IssuerGoogle Trust Services
Subjecttopcdn.site
Fingerprint57:D5:2D:92:D9:AA:91:EE:1A:1E:BD:68:96:DC:72:F6:C6:4A:B8:DB
ValiditySat, 07 Jun 2025 09:07:08 GMT - Fri, 05 Sep 2025 10:05:47 GMT
File type assembler source, Unicode text, UTF-8 text
Hash 5a72a30cb5e2721cf7e36ebd9846a4f6
c03db81b75b19f829201db0d01d66ef189b8180a
b0341644a22e09291520c4c51eac70ed71928ee3066f40fcff257c582afac3b1
GET /css/main.css?v=4 HTTP/1.1
Host: topcdn.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://topcdn.site/e/d9bsbch6122f/
Cookie: lang=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Jun 2025 16:58:47 GMT
content-type: text/css
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
last-modified: Thu, 26 Sep 2024 18:06:54 GMT
vary: accept-encoding
expires: Sun, 22 Jun 2025 08:45:39 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=mMX45i5j8MQ8HbP5Zm%2F0b60GbuDGV4EoBWhol2hYXmmUfqJ7bhemND3EGsEGv4EhxeUabSh23%2F3VZ9NzIzN0bfFnFWCguYY5TQ%3D%3D"}]}
age: 547987
cf-cache-status: HIT
etag: W/"66f5a2be-c03c"
content-encoding: br
cf-ray: 95350d7d280e56a8-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET topcdn.site/js/ls.js
404 Not Found 153 B IP
Requested by https://topcdn.site/e/d9bsbch6122f/
Certificate IssuerGoogle Trust Services
Subjecttopcdn.site
Fingerprint57:D5:2D:92:D9:AA:91:EE:1A:1E:BD:68:96:DC:72:F6:C6:4A:B8:DB
ValiditySat, 07 Jun 2025 09:07:08 GMT - Fri, 05 Sep 2025 10:05:47 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 932da5a430ff6db1bc48425b567d56fa
e7e88023dbbc6346d354ffe9fb7db957888c2299
10174434dbe479c08b32ce3b42b70e7c6336647d29e4393483158d590d35c325
GET /js/ls.js HTTP/1.1
Host: topcdn.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://topcdn.site/e/d9bsbch6122f/
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sat, 21 Jun 2025 16:58:47 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ypyec4QQuoFprG16koTezlSsFKcRxwsPu08P0Eqany3EYGg9h4tB7kdFOhcdvabGUqA1bOexrVmV5uenYg%2BylFxEGodbuudQA556izjKlFplfTd%2FDVOji3slBWVybg%3D%3D"}],"group":"cf-nel","max_age":604800}
age: 0
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 95350d7eabb90b3d-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1176&min_rtt=462&rtt_var=705&sent=306&recv=384&lost=0&retrans=0&sent_bytes=21229&recv_bytes=21172&delivery_rate=619727&ss_exit_cwnd=14904&ss_exit_reason=2&cwnd=12000&unsent_bytes=0&cid=642fe45eefecbee3&ts=529&inflight_dur=54&x=44"
GET be4235.rcr32.ams02.i8yz83pn.com/hls2/01/09295/d9bsbch6122f_h/seg-1-v1-a1.ts?t=mpIZZwUPxJ_brKfijcx2_xcUXN9LAIXuE0I1vpVbkvI&s=1750525127&e=10800&f=46478399&srv=52&asn=50304&sp=4000&p=
200 OK 6.6 MB URL GET be4235.rcr32.ams02.i8yz83pn.com/hls2/01/09295/d9bsbch6122f_h/seg-1-v1-a1.ts?t=mpIZZwUPxJ_brKfijcx2_xcUXN9LAIXuE0I1vpVbkvI&s=1750525127&e=10800&f=46478399&srv=52&asn=50304&sp=4000&p=
IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerLet's Encrypt
Subjectbe4235.rcr32.ams02.i8yz83pn.com
Fingerprint08:2E:6E:50:1F:6C:3C:40:46:96:50:01:A4:0B:BA:92:B6:07:E2:72
ValidityMon, 09 Jun 2025 13:59:44 GMT - Sun, 07 Sep 2025 13:59:43 GMT
Size 6.6 MB (6636032 bytes)
Hash db86a768ef337e73150f9c7df71186c7
d0dfe0e2abbf8ea0c1fbacce633307a1d2b2ba42
305638fc029fce5e95e76351a9044eb444eef9afa374f8acc08856403cbbd1b4
GET /hls2/01/09295/d9bsbch6122f_h/seg-1-v1-a1.ts?t=mpIZZwUPxJ_brKfijcx2_xcUXN9LAIXuE0I1vpVbkvI&s=1750525127&e=10800&f=46478399&srv=52&asn=50304&sp=4000&p= HTTP/1.1
Host: be4235.rcr32.ams02.i8yz83pn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 21 Jun 2025 16:58:49 GMT
Content-Type: video/MP2T
Content-Length: 6636032
Connection: keep-alive
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Expires: Tue, 24 Jun 2025 07:44:59 GMT
ETag: "5f693e80-654200"
Access-Control-Allow-Origin: *
Cache-Control: max-age=259200, no-store, no-cache
Sprint-Cache: HIT
Accept-Ranges: bytes
HEAD txpwmpgveftnm.com/
200 OK 0 B IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerLet's Encrypt
Subjecttxpwmpgveftnm.com
FingerprintC9:9B:04:3E:3D:BC:5E:C0:A3:EC:85:2D:DF:E6:F3:9F:9B:27:EB:77
ValidityFri, 20 Jun 2025 11:03:06 GMT - Thu, 18 Sep 2025 11:03:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
HEAD / HTTP/1.1
Host: txpwmpgveftnm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Content-Type: text/html
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 16:58:49 GMT
content-type: text/html
x-t56r65a73c41e67-78i43d12: 00000000000000000000000000000000
vary: Accept-Encoding, Origin
access-control-allow-origin: https://26efp.com
access-control-expose-headers: Link, X-Application-Token, X-Application-Key, X-Tag, X-Auth-Token, X-DirectionPartner-Id, X-ZoneType-Id, X-Hostname
access-control-allow-credentials: true
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
timing-allow-origin: *
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-application-key: tc2atGto8Agyjxof9f6j4
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
GET ccg90.com/5/9254409
200 OK 113 kB IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerLet's Encrypt
Subjectccg90.com
Fingerprint56:09:8B:A2:B0:CC:2D:94:BB:34:A2:E9:A2:FD:C7:53:D9:F4:20:83
ValidityWed, 23 Apr 2025 09:55:55 GMT - Tue, 22 Jul 2025 09:55:54 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 113 kB (113124 bytes)
Hash 1a574182127b2d5a856597969a03d6fa
c30f2b37b64243cce28152bad140e4c98f072ee6
3e2cdf822235a2c2f3681d01e32d87dc709263df5c5d3efa11e381916dc56aa6
GET /5/9254409 HTTP/1.1
Host: ccg90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 16:58:49 GMT
content-type: application/javascript
x-trace-id: 13a38e16e6bf4faa73367259aa7556a0
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=0081efb9abf94d9bf2e15401babd835b; expires=Sun, 21 Jun 2026 16:58:49 GMT; path=/; secure; SameSite=None
oaidts=1750525129; expires=Sun, 21 Jun 2026 16:58:49 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
GET topcdn.site/js/jquery.cookie.js
404 Not Found 153 B URL GET topcdn.site/js/jquery.cookie.js
IP
Requested by https://topcdn.site/e/d9bsbch6122f/
Certificate IssuerGoogle Trust Services
Subjecttopcdn.site
Fingerprint57:D5:2D:92:D9:AA:91:EE:1A:1E:BD:68:96:DC:72:F6:C6:4A:B8:DB
ValiditySat, 07 Jun 2025 09:07:08 GMT - Fri, 05 Sep 2025 10:05:47 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 932da5a430ff6db1bc48425b567d56fa
e7e88023dbbc6346d354ffe9fb7db957888c2299
10174434dbe479c08b32ce3b42b70e7c6336647d29e4393483158d590d35c325
GET /js/jquery.cookie.js HTTP/1.1
Host: topcdn.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://topcdn.site/e/d9bsbch6122f/
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sat, 21 Jun 2025 16:58:47 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cache-control: max-age=14400
cf-cache-status: EXPIRED
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Ru9noamJomKKt4mb0%2F%2BdOmUplYHvGRyWRWZkQN54gUfSz9v%2BIy11wzDvBHJH%2BQVENRZYQspi9lx3MksCh6oiYCiWmxqBYNugww%3D%3D"}]}
content-encoding: br
cf-ray: 95350d7d281956a8-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET topcdn.site/js/jquery.cookie.js
404 Not Found 153 B URL GET topcdn.site/js/jquery.cookie.js
IP
Requested by https://topcdn.site/e/d9bsbch6122f/
Certificate IssuerGoogle Trust Services
Subjecttopcdn.site
Fingerprint57:D5:2D:92:D9:AA:91:EE:1A:1E:BD:68:96:DC:72:F6:C6:4A:B8:DB
ValiditySat, 07 Jun 2025 09:07:08 GMT - Fri, 05 Sep 2025 10:05:47 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 932da5a430ff6db1bc48425b567d56fa
e7e88023dbbc6346d354ffe9fb7db957888c2299
10174434dbe479c08b32ce3b42b70e7c6336647d29e4393483158d590d35c325
GET /js/jquery.cookie.js HTTP/1.1
Host: topcdn.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://topcdn.site/e/d9bsbch6122f/
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sat, 21 Jun 2025 16:58:47 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=viFKMvULKihe0s1rm%2BvvYUul9Ly1002FOg38%2Fa9GXru7nO9PAE9gAOLblXIFOe810qrgWNsLMxp212ujCtByiVyBuuy46ipIivdo9bCCmBXmcTks7rFuaiQCEfdcxw%3D%3D"}],"group":"cf-nel","max_age":604800}
age: 0
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 95350d7e8bb70b3d-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1247&min_rtt=462&rtt_var=753&sent=304&recv=382&lost=0&retrans=0&sent_bytes=20465&recv_bytes=20870&delivery_rate=619727&ss_exit_cwnd=14904&ss_exit_reason=2&cwnd=12000&unsent_bytes=0&cid=642fe45eefecbee3&ts=507&inflight_dur=34&x=44"
GET 26efp.com/js/jquery.cookie.js
200 OK 4.3 kB URL GET 26efp.com/js/jquery.cookie.js
IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
Hash ae0c2c5d8f01f7d35bb698bb618a62f7
63556a22ddea1c5f23a5cf7d0b6d35c7aab54e20
75aef2e95ea7f3a70999396fba0c2ab866f4ff06313cf1b07780d800a5fc1ebc
GET /js/jquery.cookie.js HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/d9bsbch6122f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 16:58:48 GMT
content-type: application/javascript; charset=utf-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6qEe3bpmsonKdEnG10ll2Wd2HC6z%2BJ8SgFnr7unC3QnknE9C%2BpOgO5eS5cP3pMC2JvXyMLJdJBF7vg1rkWb0etDe%2FgfLzwHGOGjTLhly9siLTYdIXjoiISP4zE4%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 31 May 2011 12:53:56 GMT
etag: W/"4de4e4e4-10eb"
expires: Thu, 26 Jun 2025 09:41:03 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 199064
cf-cache-status: HIT
content-encoding: br
cf-ray: 95350d82aa9556aa-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5925&min_rtt=3574&rtt_var=5596&sent=31&recv=32&lost=0&retrans=0&sent_bytes=4566&recv_bytes=3929&delivery_rate=753592&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=15480&unsent_bytes=0&cid=24d2859362461dd1&ts=143&inflight_dur=31&x=44"
GET 26efp.com/player/jw8/vast.js
200 OK 107 kB URL GET 26efp.com/player/jw8/vast.js
IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 107 kB (107114 bytes)
Hash 3cd85ca1814c3fd976764bf6b83b989d
90e931622205c6adfbc75cfe681563a127580f05
2e4fe3d8b3565a3f8b5ec0ecfe0e5f26a756401b6847dd475327793da41897f5
GET /player/jw8/vast.js HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/d9bsbch6122f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 21 Jun 2025 16:58:48 GMT
content-type: application/javascript; charset=utf-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2EKQxm%2BP9iK2r7lpHYgMB64Cn0i36zmsUeqh0ogjfSipHH7eCyz0j4eifDi%2FtxiV94XrhDv2PMC22JopDn9xIziRw8DCcWA0SYdF8v%2FUC4ujfSeXdLuKAjXFs70%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 08 Sep 2022 10:34:42 GMT
etag: W/"6319c542-1a26a"
expires: Thu, 26 Jun 2025 09:41:04 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 199063
cf-cache-status: HIT
content-encoding: br
cf-ray: 95350d841aa056aa-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1976&min_rtt=194&rtt_var=1816&sent=131&recv=46&lost=0&retrans=0&sent_bytes=108883&recv_bytes=4983&delivery_rate=15348466&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=24430&unsent_bytes=0&cid=24d2859362461dd1&ts=362&inflight_dur=68&x=44"
GET be4235.rcr32.ams02.i8yz83pn.com/hls2/01/09295/d9bsbch6122f_h/encryption.key?t=mpIZZwUPxJ_brKfijcx2_xcUXN9LAIXuE0I1vpVbkvI&s=1750525127&e=10800&f=46478399&srv=52&asn=50304&sp=4000&p=
200 OK 16 B URL GET be4235.rcr32.ams02.i8yz83pn.com/hls2/01/09295/d9bsbch6122f_h/encryption.key?t=mpIZZwUPxJ_brKfijcx2_xcUXN9LAIXuE0I1vpVbkvI&s=1750525127&e=10800&f=46478399&srv=52&asn=50304&sp=4000&p=
IP
Requested by https://26efp.com/bkg/d9bsbch6122f
Certificate IssuerLet's Encrypt
Subjectbe4235.rcr32.ams02.i8yz83pn.com
Fingerprint08:2E:6E:50:1F:6C:3C:40:46:96:50:01:A4:0B:BA:92:B6:07:E2:72
ValidityMon, 09 Jun 2025 13:59:44 GMT - Sun, 07 Sep 2025 13:59:43 GMT
Hash 1e6978e285e09876f7dea82719dc2c09
f447b3751ce335aac5a4c7fc01755257d2148615
77355a92fd22448965445d47784de3d2e88ac1c153f6e12b3a851d2712d05f13
GET /hls2/01/09295/d9bsbch6122f_h/encryption.key?t=mpIZZwUPxJ_brKfijcx2_xcUXN9LAIXuE0I1vpVbkvI&s=1750525127&e=10800&f=46478399&srv=52&asn=50304&sp=4000&p= HTTP/1.1
Host: be4235.rcr32.ams02.i8yz83pn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 21 Jun 2025 16:58:49 GMT
Content-Type: application/octet-stream
Content-Length: 16
Connection: keep-alive
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Expires: Tue, 24 Jun 2025 07:44:58 GMT
ETag: "5f693e80-10"
Access-Control-Allow-Origin: *
Cache-Control: max-age=259200, no-store, no-cache
Sprint-Cache: HIT
Accept-Ranges: bytes
104.21.32.59
139.45.197.161
186.2.165.35
185.248.171.74