Security Analysis Results

9e7285dd1f9f67b9-SJC

no-cache, max-age=0, must-revalidate, no-store

keep-alive

br

text/html; charset=utf-8

Sat, 04 Apr 2026 18:54:40 GMT

{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}

{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=CCBy7dOibmaJJGdJLZpFMjQ7GCkY0d0BR1Z%2BLPUH5DqIpUIXweyrmBYWUeUca%2BFh0MuvLbeQgRttZRmUlXrIW5Qho84btbL%2FfBfBNr4CW66eUBPdpM42iCxgFOn3W%2BmhpIAU"}]}

cloudflare

max-age=15552000; includeSubDomains; preload

chunked

h3=":443"; ma=86400

DYNAMIC

child-src 'self' blob:; object-src 'none'; manifest-src 'self'; worker-src 'self' blob: *.bookmyshow.com *.bmscdn.com *.cricketworldcup.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' *.bmscdn.com https://*.freshchat.com https://*.freshbots.ai https://www.riddle.com fonts.googleapis.com https://license-global.pallycon.com; default-src 'self' data: blob: ssl.gstatic.com 'unsafe-inline'; img-src 'self' 'unsafe-inline' data: *.bmscdn.com *.bmstvod.com *.testbms.com *.google.com *.bookmyshow.com *.cricketworldcup.com https://*.bing.com https://i.ytimg.com https://*.youtube.com https://*.google.co.in https://*.facebook.com https://*.cloudfront.net https://*.brightcove.com https://*.freshbots.ai https://s3.amazonaws.com *.doubleclick.net *.flashtalking.com https://res.cloudinary.com https://secure.gravatar.com *.googleadservices.com *.googlesyndication.com https://cf-images.ap-southeast-1.prod.boltdns.net *.gravatar.com https://www.instagram.com https://platform.twitter.com *.google-analytics.com *.googletagmanager.com *.criteo.com *.criteo.net secure-ds.serving-sys.com lm.serving-sys.com bs.serving-sys.com https://sync.aralego.com srv.tunefindforfans.com ids.ad.gt https://prebid.andbeyond.media https://pagead2.googlesyndication.com/ https://c.4dex.io/ https://license-global.pallycon.com; media-src blob: 'self' *.bookmyshow.com *.cricketworldcup.com *.bmscdn.com *.bmstvod.com 'unsafe-inline' https://*.cloudfront.net https://license-global.pallycon.com; script-src 'self' *.bmscdn.com *.bmstvod.com *.pusher.com 'unsafe-eval' 'unsafe-inline' *.bookmyshow.com *.cricketworldcup.com https://wzrkt.com https://s0.2mdn.net https://*.google.com https://script.4dex.io http://code.jquery.com https://vjs.zencdn.net http://www.gstatic.com https://www.gstatic.com https://www.youtube.com https://*.cloudfront.net https://*.brightcove.net https://*.brightcove.com https://www.riddle.com https://cdn.ampproject.org http://static.clevertap.com https://eu1.clevertap-prod.com http://p.adlooxtracking.com http://client.perimeterx.net https://connect.facebook.net https://imasdk.googleapis.com https://rtbcdn.andbeyond.media https://adservice.google.co.in *.doubleclick.net *.flashtalking.com *.googletagmanager.com *.googleadservices.com *.googletagservices.com http://rtbpass-us.andbeyond.media http://global.cloud.netacuity.com https://s3.ap-south-1.amazonaws.com https://customerglu-ui-v3.vercel.app *.googlesyndication.com https://*.freshchat.com https://*.freshbots.ai https://*.bing.com https://ajax.cloudflare.com https://runtime.imagekit.io https://www.instagram.com https://platform.twitter.com *.googleanalytics.com *.google-analytics.com https://bs.serving-sys.com https://*.sharechat.com *.crwdcntrl.net *.criteo.com *.criteo.net cdn.doubleverify secure-ds.serving-sys.com lm.serving-sys.com https://*.branch.io https://app.link *.criteo.com *.criteo.net srv.tunefindforfans.com a.ad.gt cs.deviceatlas-cdn.com p.ad.gt cdn.hadronid.net *.ltmsphrcl.net https://pixels.ad.gt https://prebid.andbeyond.media https://pagead2.googlesyndication.com/ https://c.4dex.io/ https://ads.aralego.com/cookiesync https://license-global.pallycon.com; connect-src ws: wss: 'self' *.bms.bz *.bookmyshow.com *.cricketworldcup.com *.bmscdn.com *.bmstvod.com *.pusher.com https://bs.com https://*.bmscdn.com https://*.google.com https://*.gstatic.com https://*.google.co.in https://*.facebook.com https://script.4dex.io https://*.akamaihd.net https://*.bookmyshow.com https://*.cloudfront.net https://*.freshbots.ai https://cdn.ampproject.org https://*.vdocipher.com https://*.brightcove.com https://manifest.prod.boltdns.net http://global.cloud.netacuity.com *.googletagmanager.com https://attestation.android.com *.doubleclick.net *.flashtalking.com *.googlesyndication.com https://us-central1-amp-error-reporting.cloudfunctions.net https://bs.serving-sys.com https://view.adjust.net.in *.google-analytics.com https://*.sharechat.com *.freshworksapi.com *.recruiterbox.com *.crwdcntrl.net lm.serving-sys.com https://*.branch.io https://app.link *.criteo.com *.criteo.net srv.tunefindforfans.com *.ltmsphrcl.net https://seg.ad.gt https://a.ad.gt https://id.hadron.ad.gt https://prebid.andbeyond.media https://pagead2.googlesyndication.com/ https://c.4dex.io/ https://license-global.pallycon.com; font-src fonts.gstatic.com 'self' data: https://maxcdn.bootstrapcdn.com *.bmscdn.com; frame-src 'self' 'unsafe-inline' *.bmscdn.com https://*.google.com *.googletagmanager.com https://*.youtube.com https://*.facebook.com https://*.freshchat.com *.doubleclick.net *.flashtalking.com http://imasdk.googleapis.com https://app-bms.customerglu.com *.googlesyndication.com https://www.riddle.com https://www.instagram.com https://platform.twitter.com *.crwdcntrl.net *.criteo.com *.criteo.net https://cuelinks.gotrackier.com/ *.ltmsphrcl.net https://prebid.andbeyond.media https://pagead2.googlesyndication.com/ https://c.4dex.io/ https://license-global.pallycon.com;

58.562115ms

/

104.28.152.169

Accept-Encoding User-Agent, Accept-Encoding

nosniff

SAMEORIGIN

mobile-web-app-production-98b8b9f55-csmfl

1; mode=block