GET 26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
188.114.96.1200 OK 40 kB URL User Request GET 26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text, with very long lines (28019)
Hash 465942e967871dacb65618ebb9c2969a
526083d600f93be54c81e93d3c598da6da8f5b4a
c2caa9930995238977dde2cd704a2317040d96db47786afd3434c67c3080a998
GET /bkg/xovufvkssqk1?ref=animenosub.to HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 19:11:50 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 19 Jun 2025 19:11:50 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=zRpz5UHbU%2BDcl4NbqsHsF8cQk0HJaoWbR9d%2BFi9QdKqzHKPKULZ50G3uLWvWbYmssrHR2oiBfd%2Fyxv8z%2F1VcJQkj%2Bmlf%2Br0%3D"}]}
content-encoding: br
set-cookie: lang=1; HttpOnly; Path=/; Domain=26efp.com
cf-ray: 952d93031d15b4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 26efp.com/player/jw8_26/jwplayer.js?v=5.0.2
188.114.96.1200 OK 111 kB URL GET 26efp.com/player/jw8_26/jwplayer.js?v=5.0.2
IP 188.114.96.1:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65511)
Size 111 kB (111441 bytes)
Hash f91de142eed44442bad231961488c5d0
ea6c79968011a5b59e444d792f7ab048a1f7e31d
b3031ee0f2674c203fe1400df12a96148c4bed344553fc9063c3846ba8466295
GET /player/jw8_26/jwplayer.js?v=5.0.2 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 19:11:50 GMT
content-type: application/javascript; charset=utf-8
server: cloudflare
last-modified: Fri, 05 Apr 2024 14:58:43 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:41:03 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 120646
cf-cache-status: HIT
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=wwaYwnkTLMGrQYz%2B89MYbXL0aSH%2F%2FZllc97LQ3LeAXrzIHooB2XBjFnFq32ekiX9nW8grG2Ve7CM1nK7ibQlxM06BWmbF%2BM%3D"}]}
etag: W/"661011a3-1b351"
content-encoding: br
cf-ray: 952d9306be5656ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 26efp.com/dl?b=get_slides&length=1420&url=https://videothumbs.me/xovufvkssqk10000.jpg
188.114.96.1200 OK 9.6 kB URL GET 26efp.com/dl?b=get_slides&length=1420&url=https://videothumbs.me/xovufvkssqk10000.jpg
IP 188.114.96.1:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type WebVTT subtitles, ASCII text
Hash 1a49a9af6b02b5318baeda23255d4990
106b91b4496e6be4496c9af09cf6a440a6e83da0
2c8169260a389ec2ca637e5a058ec260325f39f85858ff8bb32e82ca5496ad6d
GET /dl?b=get_slides&length=1420&url=https://videothumbs.me/xovufvkssqk10000.jpg HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Cookie: lang=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 19:11:51 GMT
content-type: text/vtt
server: cloudflare
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-store
cf-cache-status: DYNAMIC
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=3U%2BZOWDMTL5ZUWjRruS0W72leV7rAshbrG7hTZKqavirIDYkDIScj1FUEidNAkMu2tsdjqZYZ1UzoPqi5OeLrzfZHXh7eRc%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 952d930b0bc256ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET be6721.rcr72.waw04.i8yz83pn.com/hls2/05/09292/xovufvkssqk1_x/index-v1-a1.m3u8?t=CnwKPkiOHrpg5ooNsoy4d6pWsI2TgI0VU81iyF0hw8A&s=1750446710&e=10800&f=46461684&srv=1065&asn=50304&sp=5500&p=
185.248.169.67200 OK 30 kB URL GET be6721.rcr72.waw04.i8yz83pn.com/hls2/05/09292/xovufvkssqk1_x/index-v1-a1.m3u8?t=CnwKPkiOHrpg5ooNsoy4d6pWsI2TgI0VU81iyF0hw8A&s=1750446710&e=10800&f=46461684&srv=1065&asn=50304&sp=5500&p=
IP 185.248.169.67:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerLet's Encrypt
Subjectbe6721.rcr72.waw04.i8yz83pn.com
Fingerprint8D:BB:F2:65:6C:54:86:55:DD:3E:70:43:8C:0E:FE:15:E2:BF:A3:8F
ValidityMon, 09 Jun 2025 14:28:44 GMT - Sun, 07 Sep 2025 14:28:43 GMT
Hash 19e0e352eeb4b4492b659de382db6ae2
04a2e6aaed76fee59b292b999da34aadbd8bcfe9
a053176d136995e550f7f56ab669dab000e99219cd8ee2b03b09a51a818597f9
GET /hls2/05/09292/xovufvkssqk1_x/index-v1-a1.m3u8?t=CnwKPkiOHrpg5ooNsoy4d6pWsI2TgI0VU81iyF0hw8A&s=1750446710&e=10800&f=46461684&srv=1065&asn=50304&sp=5500&p= HTTP/1.1
Host: be6721.rcr72.waw04.i8yz83pn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 20 Jun 2025 19:11:51 GMT
Content-Type: application/vnd.apple.mpegurl
Last-Modified: Fri, 20 Jun 2025 19:11:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 23 Jun 2025 19:11:51 GMT
Access-Control-Allow-Origin: *
Cache-Control: max-age=259200, no-store, no-cache
Sprint-Cache: BYPASS
Content-Encoding: gzip
GET be6721.rcr72.waw04.i8yz83pn.com/hls2/05/09292/xovufvkssqk1_x/master.m3u8?t=CnwKPkiOHrpg5ooNsoy4d6pWsI2TgI0VU81iyF0hw8A&s=1750446710&e=10800&f=46461684&srv=1065&asn=50304&sp=5500&p=
185.248.169.67200 OK 609 B URL GET be6721.rcr72.waw04.i8yz83pn.com/hls2/05/09292/xovufvkssqk1_x/master.m3u8?t=CnwKPkiOHrpg5ooNsoy4d6pWsI2TgI0VU81iyF0hw8A&s=1750446710&e=10800&f=46461684&srv=1065&asn=50304&sp=5500&p=
IP 185.248.169.67:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerLet's Encrypt
Subjectbe6721.rcr72.waw04.i8yz83pn.com
Fingerprint8D:BB:F2:65:6C:54:86:55:DD:3E:70:43:8C:0E:FE:15:E2:BF:A3:8F
ValidityMon, 09 Jun 2025 14:28:44 GMT - Sun, 07 Sep 2025 14:28:43 GMT
Hash f504d6801decd04e014fd39fde4c4ce9
be71f812ac355ed0a2919302424b3bb438c2570b
1cfcbc6ddad7b9c623a4d955d284401d31fa66c74c091ff99519b31dfb2633e7
GET /hls2/05/09292/xovufvkssqk1_x/master.m3u8?t=CnwKPkiOHrpg5ooNsoy4d6pWsI2TgI0VU81iyF0hw8A&s=1750446710&e=10800&f=46461684&srv=1065&asn=50304&sp=5500&p= HTTP/1.1
Host: be6721.rcr72.waw04.i8yz83pn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 20 Jun 2025 19:11:51 GMT
Content-Type: application/vnd.apple.mpegurl
Last-Modified: Fri, 20 Jun 2025 19:11:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 23 Jun 2025 19:11:51 GMT
Access-Control-Allow-Origin: *
Cache-Control: max-age=259200, no-store, no-cache
Sprint-Cache: BYPASS
Content-Encoding: gzip
POST ccg90.com/wrr?z=9254410&p_rid=484fcb0e-5b47-4f8d-b480-9804aaf176ee&rb=DxcqIq4-pHEv_MaBLz7F_SrSQCj7Otqquq8Eo0MVj98oxfZlynG-yTVmqoV9IUOyNCFXnv9ZGZ630grv0bx7gSNy-BMrM9fkaejg0k4ECGZuQS6SEZQjx11Sz592Qh4FquwK80sAsbdzbs5Nsb8eLOh4kKM_ML1CJgvWoF9dLF3mMO76rz3eLfe8DH8f6HbrX33IXoxNjU1LaiZzJPGo2d4hRCJZoC3d4WE6gpr4TOOsWkuLQZkDPhO69u6Ph_CRW954FlunBrVlg9ocdciq-mdiV4Fg-IWBiI8vRg==&dmn=ccg90.com&userId=0081ee22e5f6409efcfdbc75fc538a03
139.45.197.106204 No Content 0 B URL POST ccg90.com/wrr?z=9254410&p_rid=484fcb0e-5b47-4f8d-b480-9804aaf176ee&rb=DxcqIq4-pHEv_MaBLz7F_SrSQCj7Otqquq8Eo0MVj98oxfZlynG-yTVmqoV9IUOyNCFXnv9ZGZ630grv0bx7gSNy-BMrM9fkaejg0k4ECGZuQS6SEZQjx11Sz592Qh4FquwK80sAsbdzbs5Nsb8eLOh4kKM_ML1CJgvWoF9dLF3mMO76rz3eLfe8DH8f6HbrX33IXoxNjU1LaiZzJPGo2d4hRCJZoC3d4WE6gpr4TOOsWkuLQZkDPhO69u6Ph_CRW954FlunBrVlg9ocdciq-mdiV4Fg-IWBiI8vRg==&dmn=ccg90.com&userId=0081ee22e5f6409efcfdbc75fc538a03
IP 139.45.197.106:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerLet's Encrypt
Subjectccg90.com
Fingerprint56:09:8B:A2:B0:CC:2D:94:BB:34:A2:E9:A2:FD:C7:53:D9:F4:20:83
ValidityWed, 23 Apr 2025 09:55:55 GMT - Tue, 22 Jul 2025 09:55:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wrr?z=9254410&p_rid=484fcb0e-5b47-4f8d-b480-9804aaf176ee&rb=DxcqIq4-pHEv_MaBLz7F_SrSQCj7Otqquq8Eo0MVj98oxfZlynG-yTVmqoV9IUOyNCFXnv9ZGZ630grv0bx7gSNy-BMrM9fkaejg0k4ECGZuQS6SEZQjx11Sz592Qh4FquwK80sAsbdzbs5Nsb8eLOh4kKM_ML1CJgvWoF9dLF3mMO76rz3eLfe8DH8f6HbrX33IXoxNjU1LaiZzJPGo2d4hRCJZoC3d4WE6gpr4TOOsWkuLQZkDPhO69u6Ph_CRW954FlunBrVlg9ocdciq-mdiV4Fg-IWBiI8vRg==&dmn=ccg90.com&userId=0081ee22e5f6409efcfdbc75fc538a03 HTTP/1.1
Host: ccg90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://26efp.com/
content-type: application/json
Content-Length: 2644
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Fri, 20 Jun 2025 19:11:53 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://26efp.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
GET filemoon.to/assets/images/favicon/favicon-16x16.png
186.2.165.35200 OK 370 B URL GET filemoon.to/assets/images/favicon/favicon-16x16.png
IP 186.2.165.35:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerLet's Encrypt
Subjectfilemoon.to
FingerprintF2:0A:8B:C2:E1:42:0D:4C:55:54:FA:CB:9F:84:EB:0C:14:87:B8:CD
ValidityWed, 18 Jun 2025 09:33:36 GMT - Tue, 16 Sep 2025 09:33:35 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Hash 1890e941734d87980f46cd0d6b83c3f6
999a3546ab4605a3988801f45b77df2df0773e51
fa5d0d05df5fde625a3d244297de45ca7d82efd60e89646730e8cffaafac7049
GET /assets/images/favicon/favicon-16x16.png HTTP/1.1
Host: filemoon.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=trWZjlAx4sph3eUZ; Domain=.filemoon.to; Path=/; Expires=Fri, 20-Jun-2025 19:31:51 GMT
__ddg10_=1750446711; Domain=.filemoon.to; Path=/; Expires=Fri, 20-Jun-2025 19:31:51 GMT
__ddg9_=91.90.42.154; Domain=.filemoon.to; Path=/; Expires=Fri, 20-Jun-2025 19:31:51 GMT
__ddg1_=d1SAofyzxfb42DaU4thc; Domain=.filemoon.to; HttpOnly; Path=/; Expires=Sat, 20-Jun-2026 19:11:51 GMT
content-security-policy: upgrade-insecure-requests;
date: Fri, 20 Jun 2025 14:45:21 GMT
content-type: image/png
content-length: 370
last-modified: Tue, 10 May 2022 16:16:39 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
accept-ranges: bytes
ddg-cache-status: HIT,MISS
etag: "627a8fe7-172"
expires: Fri, 27 Jun 2025 14:45:21 GMT
age: 15990
X-Firefox-Spdy: h2
GET 26efp.com/js/ls.js
188.114.96.1200 OK 2.1 kB IP 188.114.96.1:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text, with very long lines (2063), with no line terminators
Hash f6784d7271569579cbc7e508fddb3fbb
61be0722316952e865893972791486e26961cdda
96f2f3c87be4a0582def1b5e1e9e19aa0529adb7fd9277cede56c1eefd906d01
GET /js/ls.js HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 19:11:50 GMT
content-type: application/javascript; charset=utf-8
server: cloudflare
last-modified: Tue, 14 Feb 2023 11:28:54 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:41:03 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 120647
cf-cache-status: HIT
priority: u=2,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=BpbkmLnlYImHrq4Lk3AUpaXbINhjamxY6V27LIwhvZYsAExuQAk4WP8oskUe9FgE6PJLNK8nWHxO8vlkVjb2YlXv7fRJdQU%3D"}]}
etag: W/"63eb7076-80f"
content-encoding: br
cf-ray: 952d9306ae4656ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 26efp.com/js/bafsd.js
188.114.96.1200 OK 14 kB IP 188.114.96.1:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text, with CRLF line terminators
Hash c2432aca90e92e0370d2ded2545eb1fa
8f1ae40f7dc9c4ccfcb91d04530a1f072e9d06eb
89c40275bddb7257d519bda010de1c4df70a30b5f84be325f2ae53168f276cb5
GET /js/bafsd.js HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 19:11:50 GMT
content-type: application/javascript; charset=utf-8
server: cloudflare
last-modified: Fri, 04 Oct 2024 05:52:43 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:41:03 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 120647
cf-cache-status: HIT
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=acJzEHPzKhQA8mXr1Kkf56azYh6x73LPsw8OSScrr5JybkGX57zwMXpdbNQPEyN7MHcpRSogWa1KFlBsOuWu2qdOfZ3gDSc%3D"}]}
etag: W/"66ff82ab-358a"
content-encoding: br
cf-ray: 952d9306ae4d56ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 26efp.com/player/jw8/vast.js
188.114.96.1200 OK 107 kB URL GET 26efp.com/player/jw8/vast.js
IP 188.114.96.1:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 107 kB (107114 bytes)
Hash 3cd85ca1814c3fd976764bf6b83b989d
90e931622205c6adfbc75cfe681563a127580f05
2e4fe3d8b3565a3f8b5ec0ecfe0e5f26a756401b6847dd475327793da41897f5
GET /player/jw8/vast.js HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 19:11:51 GMT
content-type: application/javascript; charset=utf-8
server: cloudflare
last-modified: Thu, 08 Sep 2022 10:34:42 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:41:04 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 120646
cf-cache-status: HIT
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=cyG5IUjZgbMoEY7YAuJuI%2FqPlbYWFJucD9UcH2XjPUePu48PTOUX9SWQzrKy4c0KBG%2Fyf1YoECCejiYVF3KZvDFLUffTe%2Bc%3D"}]}
etag: W/"6319c542-1a26a"
content-encoding: br
cf-ray: 952d9308889356ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET be6721.rcr72.waw04.i8yz83pn.com/hls2/05/09292/xovufvkssqk1_x/seg-1-v1-a1.ts?t=CnwKPkiOHrpg5ooNsoy4d6pWsI2TgI0VU81iyF0hw8A&s=1750446710&e=10800&f=46461684&srv=1065&asn=50304&sp=5500&p=
185.248.169.67200 OK 4.6 MB URL GET be6721.rcr72.waw04.i8yz83pn.com/hls2/05/09292/xovufvkssqk1_x/seg-1-v1-a1.ts?t=CnwKPkiOHrpg5ooNsoy4d6pWsI2TgI0VU81iyF0hw8A&s=1750446710&e=10800&f=46461684&srv=1065&asn=50304&sp=5500&p=
IP 185.248.169.67:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerLet's Encrypt
Subjectbe6721.rcr72.waw04.i8yz83pn.com
Fingerprint8D:BB:F2:65:6C:54:86:55:DD:3E:70:43:8C:0E:FE:15:E2:BF:A3:8F
ValidityMon, 09 Jun 2025 14:28:44 GMT - Sun, 07 Sep 2025 14:28:43 GMT
File type MPEG transport stream data
Size 4.6 MB (4581560 bytes)
Hash 3510a79d9259487259c539578a8627a9
042840d458ea36fb3ab842fd72eff3870896417c
e29f5349b7ddbd3fb5e29413f04a4fe60c240e1b0de5f0a684bac24ac28dc387
GET /hls2/05/09292/xovufvkssqk1_x/seg-1-v1-a1.ts?t=CnwKPkiOHrpg5ooNsoy4d6pWsI2TgI0VU81iyF0hw8A&s=1750446710&e=10800&f=46461684&srv=1065&asn=50304&sp=5500&p= HTTP/1.1
Host: be6721.rcr72.waw04.i8yz83pn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 20 Jun 2025 19:11:51 GMT
Content-Type: video/MP2T
Content-Length: 4581560
Connection: keep-alive
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Expires: Mon, 23 Jun 2025 14:08:16 GMT
ETag: "5f693e80-45e8b8"
Access-Control-Allow-Origin: *
Cache-Control: max-age=259200, no-store, no-cache
Sprint-Cache: HIT
Accept-Ranges: bytes
GET 26efp.com/adcgi?id=61640998
188.114.96.1404 Not Found 2.0 kB URL GET 26efp.com/adcgi?id=61640998
IP 188.114.96.1:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 78598915b8026c43308f5937da5c2e3e
2423083b2bfdfde76ba2079493f33d58097f05cf
b381f11049433f95c1fa966ba65661e7905b58e240ada758a49ab86dc7f86f27
GET /adcgi?id=61640998 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Cookie: lang=1; prefetchAd_9254410=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 20 Jun 2025 19:11:53 GMT
content-type: text/html; charset=utf-8
server: cloudflare
last-modified: Fri, 24 Jan 2025 17:58:42 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2B0JT8gBHSPFMSxWXPb5I5fBP7R2Ryw7KThsQnX7oJz3b2rNELdH3nZO6OHTqzQ6Yd02QNRQ8HHMjX%2BDJElSE%2B%2BXX5RQ%2FEwA%3D"}]}
content-encoding: br
cf-ray: 952d93137e7f56ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 26efp.com/css/main.css?v=4
188.114.96.1200 OK 49 kB URL GET 26efp.com/css/main.css?v=4
IP 188.114.96.1:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type assembler source, Unicode text, UTF-8 text
Hash 5a72a30cb5e2721cf7e36ebd9846a4f6
c03db81b75b19f829201db0d01d66ef189b8180a
b0341644a22e09291520c4c51eac70ed71928ee3066f40fcff257c582afac3b1
GET /css/main.css?v=4 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Cookie: lang=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 19:11:50 GMT
content-type: text/css
server: cloudflare
last-modified: Thu, 26 Sep 2024 18:06:54 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:41:02 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 120647
cf-cache-status: HIT
priority: u=2,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=gvvhDLdw1iFdVZ3%2Bo7fu8XrZOpSZjtGpoOI3Nei88HuI8GVAglDBX1rdzjsWC509aAcrmfXYAzOvTZNP066asW6E3ZFVJDI%3D"}]}
etag: W/"66f5a2be-c03c"
content-encoding: br
cf-ray: 952d9306ae3c56ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 26efp.com/js/xupload.js?v=3
188.114.96.1200 OK 11 kB URL GET 26efp.com/js/xupload.js?v=3
IP 188.114.96.1:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text
Hash 200f7636e884860eed563210f5125c16
3312a1318afed0df1fa4a93cac2016165c651f28
01cd57ece4bf51c9db1a880a36145f8bda86634cf6b0cb69e6f9e7f187c107bd
GET /js/xupload.js?v=3 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 19:11:50 GMT
content-type: application/javascript; charset=utf-8
server: cloudflare
last-modified: Thu, 27 Mar 2025 07:57:44 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:42:08 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 120582
cf-cache-status: HIT
priority: u=2,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=AoEct2MXxsNhDUaAuGMwjDsmg9G%2F%2Fm%2BMvyFh%2FcLIcjGqJNSuIB7JOkjOysjVZ2goZC5FQ81GpzC3r%2BQmXaValJS7AWExHo0%3D"}]}
etag: W/"67e504f8-2b52"
content-encoding: br
cf-ray: 952d9306ae4156ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 26efp.com/js/jquery.cookie.js
188.114.96.1200 OK 4.3 kB URL GET 26efp.com/js/jquery.cookie.js
IP 188.114.96.1:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
Hash ae0c2c5d8f01f7d35bb698bb618a62f7
63556a22ddea1c5f23a5cf7d0b6d35c7aab54e20
75aef2e95ea7f3a70999396fba0c2ab866f4ff06313cf1b07780d800a5fc1ebc
GET /js/jquery.cookie.js HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 19:11:50 GMT
content-type: application/javascript; charset=utf-8
server: cloudflare
last-modified: Tue, 31 May 2011 12:53:56 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:41:03 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 120647
cf-cache-status: HIT
priority: u=2,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Ab8j28fOuZf41lNpvrBZ%2FP7so6sYUHRBsFojtKS6rkQFxhvHhfD70FKizBCehoqLEwCpt85mMr9xOA63LuEdMQBcF82KdwA%3D"}]}
etag: W/"4de4e4e4-10eb"
content-encoding: br
cf-ray: 952d9306ae4256ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 26efp.com/player/jw8_26/provider.hlsjs.js?v=2
188.114.96.1200 OK 423 kB URL GET 26efp.com/player/jw8_26/provider.hlsjs.js?v=2
IP 188.114.96.1:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text, with very long lines (65143)
Size 423 kB (422959 bytes)
Hash 0f95e38aa7bb0943693b51bd6a7deed0
26c89f76894108f76ad23af32ecc6b1e708993ba
1b1263b7061aaca7fe0b69168b16cb2401a7fe2ada08ccfdd373ee06c7d125b1
GET /player/jw8_26/provider.hlsjs.js?v=2 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 19:11:51 GMT
content-type: application/javascript; charset=utf-8
server: cloudflare
last-modified: Fri, 05 Apr 2024 14:57:50 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:41:05 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 120645
cf-cache-status: HIT
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=2n8x8x0CtfOCk4hRehImFQKn%2Bs4J6pOR3tCr0F%2B3T5mvow7LKr5ox3KuFcJcXb84EVC0%2F1qRPxRfxT79PMizZmSqWp2ZPho%3D"}]}
etag: W/"6610116e-6742f"
content-encoding: br
cf-ray: 952d9308b8dc56ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET cm65.com/?rb=DxcqIq4-pHEv_MaBLz7F_SrSQCj7Otqquq8Eo0MVj98oxfZlynG-yTVmqoV9IUOyNCFXnv9ZGZ630grv0bx7gSNy-BMrM9fkaejg0k4ECGZuQS6SEZQjx11Sz592Qh4FquwK80sAsbdzbs5Nsb8eLOh4kKM_ML1CJgvWoF9dLF3mMO76rz3eLfe8DH8f6HbrX33IXoxNjU1LaiZzJPGo2d4hRCJZoC3d4WE6gpr4TOOsWkuLQZkDPhO69u6Ph_CRW954FlunBrVlg9ocdciq-mdiV4Fg-IWBiI8vRg%3D%3D&request_ab2=0&zoneid=9254410&js_build=iclick-v1.1463.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=1&pl=https%3A%2F%2F26efp.com%2Fbkg%2Fxovufvkssqk1%3Fref%3Danimenosub.to&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&tt=4&wgl=llvmpipe&js_build=iclick-v1.1463.0&navlng=en-US&vsbl=true&pnt=0&pnrc=0&bs=484fcb0e-5b47-4f8d-b480-9804aaf176ee&wasm=1&userId=0081ee22e5f6409efcfdbc75fc538a03&m=link
139.45.196.64200 OK 2.4 kB URL GET cm65.com/?rb=DxcqIq4-pHEv_MaBLz7F_SrSQCj7Otqquq8Eo0MVj98oxfZlynG-yTVmqoV9IUOyNCFXnv9ZGZ630grv0bx7gSNy-BMrM9fkaejg0k4ECGZuQS6SEZQjx11Sz592Qh4FquwK80sAsbdzbs5Nsb8eLOh4kKM_ML1CJgvWoF9dLF3mMO76rz3eLfe8DH8f6HbrX33IXoxNjU1LaiZzJPGo2d4hRCJZoC3d4WE6gpr4TOOsWkuLQZkDPhO69u6Ph_CRW954FlunBrVlg9ocdciq-mdiV4Fg-IWBiI8vRg%3D%3D&request_ab2=0&zoneid=9254410&js_build=iclick-v1.1463.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=1&pl=https%3A%2F%2F26efp.com%2Fbkg%2Fxovufvkssqk1%3Fref%3Danimenosub.to&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&tt=4&wgl=llvmpipe&js_build=iclick-v1.1463.0&navlng=en-US&vsbl=true&pnt=0&pnrc=0&bs=484fcb0e-5b47-4f8d-b480-9804aaf176ee&wasm=1&userId=0081ee22e5f6409efcfdbc75fc538a03&m=link
IP 139.45.196.64:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerLet's Encrypt
Subjectcm65.com
FingerprintBD:01:8C:80:04:37:F6:D8:A9:22:23:1C:50:86:41:99:E2:44:32:B9
ValidityTue, 22 Apr 2025 12:53:57 GMT - Mon, 21 Jul 2025 12:53:56 GMT
Hash f2e3908ef6c6e07f77a1da77f67cebb4
7a5f7b30fcc523d721d2b2af703be21b4b3e0ac8
0b294245a05a1f526147859412d32ab0cf7bd0c91e99b71237133428e82a76bb
GET /?rb=DxcqIq4-pHEv_MaBLz7F_SrSQCj7Otqquq8Eo0MVj98oxfZlynG-yTVmqoV9IUOyNCFXnv9ZGZ630grv0bx7gSNy-BMrM9fkaejg0k4ECGZuQS6SEZQjx11Sz592Qh4FquwK80sAsbdzbs5Nsb8eLOh4kKM_ML1CJgvWoF9dLF3mMO76rz3eLfe8DH8f6HbrX33IXoxNjU1LaiZzJPGo2d4hRCJZoC3d4WE6gpr4TOOsWkuLQZkDPhO69u6Ph_CRW954FlunBrVlg9ocdciq-mdiV4Fg-IWBiI8vRg%3D%3D&request_ab2=0&zoneid=9254410&js_build=iclick-v1.1463.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=1&pl=https%3A%2F%2F26efp.com%2Fbkg%2Fxovufvkssqk1%3Fref%3Danimenosub.to&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&tt=4&wgl=llvmpipe&js_build=iclick-v1.1463.0&navlng=en-US&vsbl=true&pnt=0&pnrc=0&bs=484fcb0e-5b47-4f8d-b480-9804aaf176ee&wasm=1&userId=0081ee22e5f6409efcfdbc75fc538a03&m=link HTTP/1.1
Host: cm65.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://26efp.com/
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jun 2025 19:11:52 GMT
content-type: application/json
x-trace-id: 9d92a4da2abeb410f2f960d93064eda1
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://26efp.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=0081ee22e5f6409efcfdbc75fc538a03; expires=Sat, 20 Jun 2026 19:11:52 GMT; path=/; secure; SameSite=None
oaidts=1750446712; expires=Sat, 20 Jun 2026 19:11:52 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Fri, 27 Jun 2025 19:11:52 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
GET 26efp.com/js/dnsads.js?dfp=1&ad_code=2&adsrc=3
188.114.96.1200 OK 38 B URL GET 26efp.com/js/dnsads.js?dfp=1&ad_code=2&adsrc=3
IP 188.114.96.1:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type ASCII text, with CRLF line terminators
Hash 99eccae6afa72c589ae54b5c3890282a
0f102f8f5b556635de65d16cf70fa8269c6761b4
b74a58316385de04b054737776e71c160cd60d2d01b5440b32c21651fb0ab8d3
GET /js/dnsads.js?dfp=1&ad_code=2&adsrc=3 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 19:11:50 GMT
content-type: application/javascript; charset=utf-8
server: cloudflare
last-modified: Mon, 13 Sep 2021 15:50:14 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:41:04 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 120646
cf-cache-status: HIT
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Hqk5CZ%2Fdqbb7rNQotTp5xp6HqSWWTnZUMVoL6dmZCuMzUJchJkn9xYN7iNXxQOsiwoaJye88go%2Bk9U%2F5H8xjKLr44ui3RhE%3D"}]}
etag: W/"613f7336-26"
content-encoding: br
cf-ray: 952d9306be6056ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
HEAD 26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
188.114.96.1200 OK 0 B URL HEAD 26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
IP 188.114.96.1:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /bkg/xovufvkssqk1?ref=animenosub.to HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Cookie: file_id=46461684; aff=2378; ref_url=animenosub.to; lang=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 19:11:51 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
expires: Thu, 19 Jun 2025 19:11:51 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=dUenmZE%2FqQaAmO7H97ttKTL7Tijdnx%2BMHnUR6Y90PS3JfoxQ69NuHgUQBOYHUW3ZkrmihvS5HjhoBbCg5LoB15MwfhOZCjk%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: 952d9307cfa956ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 26efp.com/assets/css/jw8-theme.css?v=3.0.6
188.114.96.1200 OK 25 kB URL GET 26efp.com/assets/css/jw8-theme.css?v=3.0.6
IP 188.114.96.1:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type ASCII text, with very long lines (938), with CRLF line terminators
Hash 218f1af32c959506efe281f39309d9a5
948fbcdba4275e13fc3e469a04df2d727aabdf4a
5425c5e4dfa36e386ee465a9fe20f61290bcd377fe3fd950164c5c6e16301593
GET /assets/css/jw8-theme.css?v=3.0.6 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Cookie: lang=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 19:11:51 GMT
content-type: text/css
server: cloudflare
last-modified: Wed, 03 Apr 2024 15:50:39 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:41:05 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 120645
cf-cache-status: HIT
priority: u=2,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=WPnH%2B75DKGF0Enn5JAzO80A0HVjW44h8%2F8P%2FbhDzEp04%2FdtHFSmohuk9q1l4HTJllKsTvjhD6tzROW6eiXvU5Ai1LzBGM%2Fw%3D"}]}
etag: W/"660d7acf-62a2"
content-encoding: br
cf-ray: 952d9308b8db56ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET my.rtmark.net/gid.js?userId=0081ee22e5f6409efcfdbc75fc538a03
172.64.146.234200 OK 65 B URL GET my.rtmark.net/gid.js?userId=0081ee22e5f6409efcfdbc75fc538a03
IP 172.64.146.234:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerGoogle Trust Services
Subjectmy.rtmark.net
Fingerprint61:93:FB:BF:25:C3:CE:7B:CB:69:5D:87:04:AA:ED:1B:35:8D:44:82
ValidityFri, 02 May 2025 11:10:51 GMT - Thu, 31 Jul 2025 12:10:47 GMT
Hash 4bef9c0afc40a0e104e034228d743a50
a5905623077edc0ca0808cf2adf79a73fdd3b55e
95fd904a07f8c274b20caaba3974d75e445b1a8b9e73d5509d9ea9b2da9d965c
GET /gid.js?userId=0081ee22e5f6409efcfdbc75fc538a03 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 19:11:52 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://26efp.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0081ee22e5f6409efcfdbc75fc538a03; expires=Sat, 20 Jun 2026 19:11:52 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 952d930fcd9456b9-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 26efp.com/js/jquery.js
188.114.96.1200 OK 90 kB IP 188.114.96.1:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /js/jquery.js HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 19:11:50 GMT
content-type: application/javascript; charset=utf-8
server: cloudflare
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:41:02 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 120647
cf-cache-status: HIT
priority: u=2,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=lwKDmkgDR%2Fd9cVRGEDAZYymPMfKkUfVOM0iOuIDFSxJzE9yhbJsNnjPzCYF7J80cbw33q2YkW8ZT2O92Lpfmh7zxHgKtNFU%3D"}]}
etag: W/"603e8adc-15d9d"
content-encoding: br
cf-ray: 952d9306ae3f56ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 26efp.com/js/dulak2.js?v=1
188.114.96.1200 OK 12 kB URL GET 26efp.com/js/dulak2.js?v=1
IP 188.114.96.1:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text, with very long lines (1402), with CRLF line terminators
Hash 7eb60dbecd9423d1e987bb0e06bb576c
021ef81e6cdd3add1c77b95facacc0b119fa3151
a594a3b1d822081d612e5325283c997131ebb22264e0279f9248910a21cb5522
GET /js/dulak2.js?v=1 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 19:11:50 GMT
content-type: application/javascript; charset=utf-8
server: cloudflare
last-modified: Wed, 09 Apr 2025 09:49:24 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:46:23 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 120327
cf-cache-status: HIT
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=O%2BJq0pM6W7QU%2Fa6me2dWO3kLYyyVKpw60thePYoR3JoUV31eOdAVMmF3erZlQzfLlzRZDvt37rSwr0cniTbd1qzzVBHI2fc%3D"}]}
etag: W/"67f642a4-2dd0"
content-encoding: br
cf-ray: 952d9306ae4956ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 26efp.com/player/jw8_26/jwplayer.core.controls.js?v=2
188.114.96.1200 OK 327 kB URL GET 26efp.com/player/jw8_26/jwplayer.core.controls.js?v=2
IP 188.114.96.1:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text, with very long lines (65143)
Size 327 kB (326903 bytes)
Hash fee77850b6b254569cf03f43a4dfdde4
35841d306d3404fbef6825371ffdbcd992ade913
50b22ddf7e9cf49716e33660cc9de3c2bbf3cb90f203d8af93810f8f97bdee3f
GET /player/jw8_26/jwplayer.core.controls.js?v=2 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Cookie: lang=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 19:11:51 GMT
content-type: application/javascript; charset=utf-8
server: cloudflare
last-modified: Wed, 03 Apr 2024 09:09:34 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:41:04 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 120646
cf-cache-status: HIT
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=rJBOqa6GXD3NidNtqRbe5YS%2FFHIRiJL%2BkU1Gss7QKvrB%2BSwDbmXp0qcfsLuIqDYUFP5cmarlkaXoe2P5idjmOnurJrvvLFU%3D"}]}
etag: W/"660d1cce-4fcf7"
content-encoding: br
cf-ray: 952d9308b8d756ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET videothumbs.me/xovufvkssqk1_xt.jpg
188.114.97.1200 OK 98 kB URL GET videothumbs.me/xovufvkssqk1_xt.jpg
IP 188.114.97.1:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerGoogle Trust Services
Subjectvideothumbs.me
FingerprintB9:B4:8A:B0:ED:DA:7E:36:8C:CA:20:F8:25:8B:1F:49:B1:E5:91:87
ValidityMon, 12 May 2025 10:17:40 GMT - Sun, 10 Aug 2025 11:15:40 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 1000x564, components 3
Hash 54ed6e044eb085e8f561a30b4ed94e5f
61f2a968092b1d40542c2ffa7254a102c9d95964
7c79bf08c88269c05bf353d91bae8995b817c2403b8c289bbf868c5c1d44f902
GET /xovufvkssqk1_xt.jpg HTTP/1.1
Host: videothumbs.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 19:11:51 GMT
content-type: image/jpeg
content-length: 97829
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
last-modified: Fri, 20 Jun 2025 13:48:04 GMT
etag: "68556694-17e25"
expires: Fri, 04 Jul 2025 14:08:03 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: MISS
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=IZFID9xIzWxYpiiZYwxEdT5ZyJ2rTMp7uTT7xvexeQfG5i4u33GNcqCOHI05Wef9geDnPvCIoaDPZvpmHMtK%2B9A7Lx58STR%2Fo34PpA%3D%3D"}]}
cf-ray: 952d930b7e6a56c5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
OPTIONS nvniwkyjbsougy.com/
139.45.197.152200 OK 0 B IP 139.45.197.152:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerLet's Encrypt
Subjectnvniwkyjbsougy.com
Fingerprint06:15:E8:91:A6:AA:13:A8:E8:A8:4F:1C:71:C6:73:B9:1F:CE:32:5F
ValidityThu, 19 Jun 2025 10:56:00 GMT - Wed, 17 Sep 2025 10:55:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: nvniwkyjbsougy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: HEAD
Access-Control-Request-Headers: content-type
Referer: https://26efp.com/
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jun 2025 19:11:51 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://26efp.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
HEAD nvniwkyjbsougy.com/
139.45.197.152200 OK 0 B IP 139.45.197.152:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerLet's Encrypt
Subjectnvniwkyjbsougy.com
Fingerprint06:15:E8:91:A6:AA:13:A8:E8:A8:4F:1C:71:C6:73:B9:1F:CE:32:5F
ValidityThu, 19 Jun 2025 10:56:00 GMT - Wed, 17 Sep 2025 10:55:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD / HTTP/1.1
Host: nvniwkyjbsougy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Content-Type: text/html
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jun 2025 19:11:51 GMT
content-type: text/html
x-t13r86a57c62e17-44i53d2: 00000000000000000000000000000000
vary: Accept-Encoding, Origin
access-control-allow-origin: https://26efp.com
access-control-expose-headers: Link, X-Application-Token, X-Application-Key, X-Tag, X-Auth-Token, X-DirectionPartner-Id, X-ZoneType-Id, X-Hostname
access-control-allow-credentials: true
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
timing-allow-origin: *
x-application-key: z6lvhZzirAms2icg0m1og
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
GET videothumbs.me/xovufvkssqk10000.jpg
188.114.97.1404 Not Found 0 B URL GET videothumbs.me/xovufvkssqk10000.jpg
IP 188.114.97.1:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerGoogle Trust Services
Subjectvideothumbs.me
FingerprintB9:B4:8A:B0:ED:DA:7E:36:8C:CA:20:F8:25:8B:1F:49:B1:E5:91:87
ValidityMon, 12 May 2025 10:17:40 GMT - Sun, 10 Aug 2025 11:15:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /xovufvkssqk10000.jpg HTTP/1.1
Host: videothumbs.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 20 Jun 2025 19:11:52 GMT
content-type: text/html
server: cloudflare
cache-control: max-age=31536000
cf-cache-status: MISS
priority: u=4,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=HnKCAmhpEmyEs0m7uZgN7r3rhlWQiUSoJsmjVzCGqJbXOhBzoR3aUohvIn%2FYeTODLk%2FxuOo4WJzf1LO%2FQTxVXpEC3YBRNzPDH5R1Kg%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: 952d930d0c080afa-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET filemoon.to/assets/images/favicon/apple-touch-icon.png
186.2.165.35200 OK 15 kB URL GET filemoon.to/assets/images/favicon/apple-touch-icon.png
IP 186.2.165.35:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerLet's Encrypt
Subjectfilemoon.to
FingerprintF2:0A:8B:C2:E1:42:0D:4C:55:54:FA:CB:9F:84:EB:0C:14:87:B8:CD
ValidityWed, 18 Jun 2025 09:33:36 GMT - Tue, 16 Sep 2025 09:33:35 GMT
File type PNG image data, 360 x 158, 8-bit/color RGBA, non-interlaced
Hash 89a3d82162fc1f11d1ffa5bd73ecff9a
6765810ff0ee7f8c1c5d9b1f419616cc9ce500c8
83e21507727c12df8021db54c02a2bdd8fcaf54409e9dfd575c955698bcecbd0
GET /assets/images/favicon/apple-touch-icon.png HTTP/1.1
Host: filemoon.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=Ak6xIJQsCdJceigr; Domain=.filemoon.to; Path=/; Expires=Fri, 20-Jun-2025 19:31:51 GMT
__ddg10_=1750446711; Domain=.filemoon.to; Path=/; Expires=Fri, 20-Jun-2025 19:31:51 GMT
__ddg9_=91.90.42.154; Domain=.filemoon.to; Path=/; Expires=Fri, 20-Jun-2025 19:31:51 GMT
__ddg1_=yPPJU63ntmLHeajI4wQ6; Domain=.filemoon.to; HttpOnly; Path=/; Expires=Sat, 20-Jun-2026 19:11:51 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 17 Jun 2025 19:29:47 GMT
content-type: image/png
content-length: 14840
last-modified: Thu, 07 Apr 2022 13:15:48 GMT
etag: "624ee404-39f8"
expires: Tue, 24 Jun 2025 19:29:47 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
accept-ranges: bytes
age: 258124
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
GET ccg90.com/5/9254410
139.45.197.106200 OK 113 kB IP 139.45.197.106:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerLet's Encrypt
Subjectccg90.com
Fingerprint56:09:8B:A2:B0:CC:2D:94:BB:34:A2:E9:A2:FD:C7:53:D9:F4:20:83
ValidityWed, 23 Apr 2025 09:55:55 GMT - Tue, 22 Jul 2025 09:55:54 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 113 kB (113199 bytes)
Hash daf41e5cf19dbc1b4f0cfb2dcfcb7361
fb86dff2b16c180b5c79e3c533dc7ce4d107fda0
f661510a332ba6c274e7a835420120c5595fb058a29a64599c5745611cc2840a
GET /5/9254410 HTTP/1.1
Host: ccg90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jun 2025 19:11:52 GMT
content-type: application/javascript
x-trace-id: 92b2eaf5ef0036636d0ace521ad6b681
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=0081ee22e5f6409efcfdbc75fc538a03; expires=Sat, 20 Jun 2026 19:11:52 GMT; path=/; secure; SameSite=None
oaidts=1750446712; expires=Sat, 20 Jun 2026 19:11:52 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
OPTIONS ccg90.com/wrr?z=9254410&p_rid=484fcb0e-5b47-4f8d-b480-9804aaf176ee&rb=DxcqIq4-pHEv_MaBLz7F_SrSQCj7Otqquq8Eo0MVj98oxfZlynG-yTVmqoV9IUOyNCFXnv9ZGZ630grv0bx7gSNy-BMrM9fkaejg0k4ECGZuQS6SEZQjx11Sz592Qh4FquwK80sAsbdzbs5Nsb8eLOh4kKM_ML1CJgvWoF9dLF3mMO76rz3eLfe8DH8f6HbrX33IXoxNjU1LaiZzJPGo2d4hRCJZoC3d4WE6gpr4TOOsWkuLQZkDPhO69u6Ph_CRW954FlunBrVlg9ocdciq-mdiV4Fg-IWBiI8vRg==&dmn=ccg90.com&userId=0081ee22e5f6409efcfdbc75fc538a03
139.45.197.106204 No Content 0 B URL OPTIONS ccg90.com/wrr?z=9254410&p_rid=484fcb0e-5b47-4f8d-b480-9804aaf176ee&rb=DxcqIq4-pHEv_MaBLz7F_SrSQCj7Otqquq8Eo0MVj98oxfZlynG-yTVmqoV9IUOyNCFXnv9ZGZ630grv0bx7gSNy-BMrM9fkaejg0k4ECGZuQS6SEZQjx11Sz592Qh4FquwK80sAsbdzbs5Nsb8eLOh4kKM_ML1CJgvWoF9dLF3mMO76rz3eLfe8DH8f6HbrX33IXoxNjU1LaiZzJPGo2d4hRCJZoC3d4WE6gpr4TOOsWkuLQZkDPhO69u6Ph_CRW954FlunBrVlg9ocdciq-mdiV4Fg-IWBiI8vRg==&dmn=ccg90.com&userId=0081ee22e5f6409efcfdbc75fc538a03
IP 139.45.197.106:443
Requested by https://26efp.com/bkg/xovufvkssqk1?ref=animenosub.to
Certificate IssuerLet's Encrypt
Subjectccg90.com
Fingerprint56:09:8B:A2:B0:CC:2D:94:BB:34:A2:E9:A2:FD:C7:53:D9:F4:20:83
ValidityWed, 23 Apr 2025 09:55:55 GMT - Tue, 22 Jul 2025 09:55:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wrr?z=9254410&p_rid=484fcb0e-5b47-4f8d-b480-9804aaf176ee&rb=DxcqIq4-pHEv_MaBLz7F_SrSQCj7Otqquq8Eo0MVj98oxfZlynG-yTVmqoV9IUOyNCFXnv9ZGZ630grv0bx7gSNy-BMrM9fkaejg0k4ECGZuQS6SEZQjx11Sz592Qh4FquwK80sAsbdzbs5Nsb8eLOh4kKM_ML1CJgvWoF9dLF3mMO76rz3eLfe8DH8f6HbrX33IXoxNjU1LaiZzJPGo2d4hRCJZoC3d4WE6gpr4TOOsWkuLQZkDPhO69u6Ph_CRW954FlunBrVlg9ocdciq-mdiV4Fg-IWBiI8vRg==&dmn=ccg90.com&userId=0081ee22e5f6409efcfdbc75fc538a03 HTTP/1.1
Host: ccg90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://26efp.com/
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Fri, 20 Jun 2025 19:11:53 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://26efp.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2