www.9apps.com/android-apps/CricInstantCricketScores
301 Moved Permanently 0 B URL HTTP/1.1 www.9apps.com/android-apps/CricInstantCricketScores
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /android-apps/CricInstantCricketScores HTTP/1.1
Host: www.9apps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 18 Jan 2023 11:32:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.9apps.com/android-apps/CricInstantCricketScores
CF-Ray: 78b701ec2e2e0b51-OSL
Cache-Control: max-age=3600
Expires: Wed, 18 Jan 2023 12:32:00 GMT
Vary: Accept-Encoding
Server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cc07d664b5dadee6f9120d54904dfa57
df75a55b0b2019684a6c512bee528c51a2c4a756
14a1bd6315a3256468edafedfd1c02a6ba147914c0f01e8504e7d8cc67781c34
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "14A1BD6315A3256468EDAFEDFD1C02A6BA147914C0F01E8504E7D8CC67781C34"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2647
Expires: Wed, 18 Jan 2023 12:16:07 GMT
Date: Wed, 18 Jan 2023 11:32:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4b8b051d555b46b1e9e64faebf91b4ab
bdab7f1f4146f0e7c16665692e4f1edd83c10a24
e069730519f658e767ec8edb57edd8e2b1ccb18d4f0ade0920654eac18f83456
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E069730519F658E767EC8EDB57EDD8E2B1CCB18D4F0ADE0920654EAC18F83456"
Last-Modified: Tue, 17 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9213
Expires: Wed, 18 Jan 2023 14:05:33 GMT
Date: Wed, 18 Jan 2023 11:32:00 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 18 Jan 2023 10:34:23 GMT
content-type: application/json
age: 3457
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d38f4bb41e1264b8a1e11ff0b1499d20
21c3e36bd908df43e0d49b747e270ec75cb882b0
3ff822eb56d2218ad6244fd013a82e0d27450ae21d47e08f1e3fdf4c82a8aad7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3FF822EB56D2218AD6244FD013A82E0D27450AE21D47E08F1E3FDF4C82A8AAD7"
Last-Modified: Mon, 16 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7812
Expires: Wed, 18 Jan 2023 13:42:12 GMT
Date: Wed, 18 Jan 2023 11:32:00 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: VajP+i2QMJF+A77TI9Le+7kAHWHeGexr6MheI13fuYTDdP8lbQ3KY19XL7F5YNPzz/zamXGFwIU=
x-amz-request-id: YBXTFWXJ0NCRJH5W
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 18 Jan 2023 10:56:39 GMT
age: 2121
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 11:32:00 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 18 Jan 2023 11:17:25 GMT
age: 875
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 79af32d8e279b4cfec147ab51cb6fcb3
d726903292bd1e08a6d9fe0719d2cd5b33dc5fe6
bfcb2d8f14d89736ac6b771f1618a8fc5e707691d60807a574fb719c8e9393ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2242
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:32:00 GMT
Last-Modified: Wed, 18 Jan 2023 10:54:38 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
sg-res.9appsdownloading.com/sg/res/jpg/10/d2/418cbe20d29b1a8f1bb03e76bbbb-3h82.jpg?x-oss-process=style/jmq200
200 OK 7.8 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/10/d2/418cbe20d29b1a8f1bb03e76bbbb-3h82.jpg?x-oss-process=style/jmq200
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash 9e6674e6caf05f3a53527ff814a857de
32d5747d78df44279498691a78accf2d43ef34f6
a0d965e998db985e4cc58f3cbac03813440ac424347935804c28955637351d17
GET /sg/res/jpg/10/d2/418cbe20d29b1a8f1bb03e76bbbb-3h82.jpg?x-oss-process=style/jmq200 HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 7821
server: AliyunOSS
x-oss-request-id: 63AFCB5149824C36395CD273
last-modified: Fri, 15 Jul 2022 08:26:24 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 44
x-oss-hash-crc64ecma: 4975677207364779713
date: Sat, 14 Jan 2023 05:41:10 GMT
etag: "10D2418CBE20D29B1A8F1BB03E76BBBB"
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: O_onCfgN__ggpeYCsnVc08R7EyjP7amQY--lYE9Qw6kk3CaFRtHaeQ==
age: 366651
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
sg-res.9appsdownloading.com/sg/res/jpg/1f/e5/8ae9bc98fad057048a2d635edf8d-spm2.jpg?x-oss-process=style/jmq200
200 OK 5.7 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/1f/e5/8ae9bc98fad057048a2d635edf8d-spm2.jpg?x-oss-process=style/jmq200
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash 7db00fc10e5b2c37cd57662253441704
e0facf1fd2f2db08683476574c44864c205d8ef5
a0b8d37182e51d7ba936d4f1997364806101f7400f867ee6a7b0e8dbfa585886
Analyzer Verdict Alert fortinet Malware
GET /sg/res/jpg/1f/e5/8ae9bc98fad057048a2d635edf8d-spm2.jpg?x-oss-process=style/jmq200 HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 5657
server: AliyunOSS
x-oss-request-id: 63ADFD910900E6363691A0C2
last-modified: Wed, 16 Dec 2020 16:35:21 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 44
x-oss-hash-crc64ecma: 14706305477946300206
date: Thu, 12 Jan 2023 20:50:27 GMT
etag: "1FE58AE9BC98FAD057048A2D635EDF8D"
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GRJqJR5LbFLVhp2wn4vRCxyuRP5Zx4whLgBLT16TFcTR81bA5Rewog==
age: 484894
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
sg-res.9appsdownloading.com/sg/res/jpg/b9/6e/7cd08771b309d5231d2b3fcca084-3ko1.jpg?x-oss-process=style/jmq200
200 OK 2.3 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/b9/6e/7cd08771b309d5231d2b3fcca084-3ko1.jpg?x-oss-process=style/jmq200
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash 3305e4eae04b91d0322ae95b4e2b6c6a
8901cac0ad1f51a2af7975ed18e9a98dc9133b5d
7b0efbd7e315f8960f7884b32e117806f7d199aaa4754984e2af3e8051b3e1ee
GET /sg/res/jpg/b9/6e/7cd08771b309d5231d2b3fcca084-3ko1.jpg?x-oss-process=style/jmq200 HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2293
server: AliyunOSS
date: Sun, 15 Jan 2023 00:29:14 GMT
x-oss-request-id: 63C348DAA846BB30307455A6
etag: "B96E7CD08771B309D5231D2B3FCCA084"
last-modified: Tue, 15 Nov 2022 17:09:05 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 30
x-oss-hash-crc64ecma: 6858059713017209871
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: a0VYoWfayZVLXhjDWT1RLIr47Md6ZizM7ibS1anea8Oj9dfjEqIifQ==
age: 298967
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
sg-res.9appsdownloading.com/sg/res/jpg/56/c0/6b2d8b9134840dd5f28d2c52b789-ei86.jpg?x-oss-process=style/jmq200
200 OK 8.0 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/56/c0/6b2d8b9134840dd5f28d2c52b789-ei86.jpg?x-oss-process=style/jmq200
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash a66d8edac9ed9c04f2d48be4f5dba290
62300b9979e165736b3a114af631ead513033dd2
fd833cf6b14451d9f6f60cbbd96e7b04f1e07b4fa006d8d27be9178f3d049aaa
GET /sg/res/jpg/56/c0/6b2d8b9134840dd5f28d2c52b789-ei86.jpg?x-oss-process=style/jmq200 HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 8028
server: AliyunOSS
date: Thu, 12 Jan 2023 02:13:15 GMT
x-oss-request-id: 63BF6CBB73F3D539307C9255
etag: "56C06B2D8B9134840DD5F28D2C52B789"
last-modified: Thu, 23 Jun 2022 10:06:15 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 37
x-oss-hash-crc64ecma: 9370224283991601238
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: E0cPEJC6aNhWneSOAFdA_bxhloVtv3nORAPZ95ikpjh0yvROO7B1GA==
age: 551926
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
sg-res.9appsdownloading.com/sg/res/jpg/01/45/38bfd7f2cdaaf85088be3e71f066-qy79.jpg?x-oss-process=style/jmq200
200 OK 6.8 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/01/45/38bfd7f2cdaaf85088be3e71f066-qy79.jpg?x-oss-process=style/jmq200
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash b734637c1b8701ae954286a1f63ee399
ffe40d5ffb01f44244bc64936a5544e7f623d2b5
2de2459cb71013923e374ff52f220bf202eb7d36f32574c1e86882478d574d86
GET /sg/res/jpg/01/45/38bfd7f2cdaaf85088be3e71f066-qy79.jpg?x-oss-process=style/jmq200 HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 6785
server: AliyunOSS
date: Wed, 11 Jan 2023 07:11:46 GMT
x-oss-request-id: 63BE6132E702E23233E4F4A4
etag: "014538BFD7F2CDAAF85088BE3E71F066"
last-modified: Wed, 11 Jan 2023 07:10:35 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 22
x-oss-hash-crc64ecma: 16766139400585297110
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9e3DPsRdkjOvlUq1h771Pryra7yrAlABZlHxu2repm5KbDErO5FFmw==
age: 620414
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
sg-res.9appsdownloading.com/sg/res/jpg/d8/8f/cc9f8c19145e95e600ba9b2fde78-6811.jpg?x-oss-process=style/jmq200
200 OK 4.6 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/d8/8f/cc9f8c19145e95e600ba9b2fde78-6811.jpg?x-oss-process=style/jmq200
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash ae0cebc5eb93972a99ac584d64a33607
6e99c83e42adc6232fcaf793d4b50af915068e42
18e470297f1f8b7bb10cd899628a4566b79a62c3ccfd074d8ce35aef145ca570
GET /sg/res/jpg/d8/8f/cc9f8c19145e95e600ba9b2fde78-6811.jpg?x-oss-process=style/jmq200 HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 4600
server: AliyunOSS
date: Thu, 12 Jan 2023 02:18:19 GMT
x-oss-request-id: 63BF6DEBA846BB3637D32300
etag: "D88FCC9F8C19145E95E600BA9B2FDE78"
last-modified: Fri, 18 Sep 2020 07:51:54 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 29
x-oss-hash-crc64ecma: 349027844270698309
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bcQDqAK-NjHonOs9CUJ6l1beXT4ocynrC5WO-FFnK0975D2ePYdB9g==
age: 551622
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
sg-res.9appsdownloading.com/sg/res/jpg/3d/5c/0ec05e8df5839e41e73cc3c75b80-ogz4.jpg?x-oss-process=style/jmq200
200 OK 4.5 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/3d/5c/0ec05e8df5839e41e73cc3c75b80-ogz4.jpg?x-oss-process=style/jmq200
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash 7d5d4c9d77b65458f7818231de7e88b6
7028c54d7bc3c674cbeadc6c2ab608641a7cc82d
d49e2f4a176932552a55fc93142bea6be58335a213eba93ce7ee80dd9eccb090
Analyzer Verdict Alert fortinet Malware
GET /sg/res/jpg/3d/5c/0ec05e8df5839e41e73cc3c75b80-ogz4.jpg?x-oss-process=style/jmq200 HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 4532
server: AliyunOSS
x-oss-request-id: 63A95FF7ECF6463533C449E2
last-modified: Fri, 18 Sep 2020 07:51:54 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 49
x-oss-hash-crc64ecma: 3454830482464826519
date: Mon, 09 Jan 2023 08:49:36 GMT
etag: "3D5C0EC05E8DF5839E41E73CC3C75B80"
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oDnUSlbDfQR8UyIsiJrhSKHszlALsyl1a09scQE6xYd8JCCyguPjSQ==
age: 787345
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
sg-res.9appsdownloading.com/sg/res/jpg/62/80/3a0882258caf6710004d3113c7db-le4.jpg?x-oss-process=style/jmq200
200 OK 1.8 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/62/80/3a0882258caf6710004d3113c7db-le4.jpg?x-oss-process=style/jmq200
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash 422855578a13a8a97dd38751454e6d53
0c4aba7839a500b4ca664b269b07830607f5d70e
4c6a1718ea6aca6b8af651b12f3b7127727291f97978507850531ad49610cab2
GET /sg/res/jpg/62/80/3a0882258caf6710004d3113c7db-le4.jpg?x-oss-process=style/jmq200 HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 1755
server: AliyunOSS
date: Mon, 09 Jan 2023 01:12:33 GMT
x-oss-request-id: 63BB6A0188D14B3633C54828
etag: "62803A0882258CAF6710004D3113C7DB"
last-modified: Thu, 27 May 2021 19:10:24 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 45
x-oss-hash-crc64ecma: 3197115493448964736
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xNG4t95Dm9dFRSOzKObXsIEC_j1GNItJaWuJ3_j1lP9vRJNvsY9-oQ==
age: 814768
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
sg-res.9appsdownloading.com/sg/res/jpg/cb/7e/912b91a58ebcf9f6fc919fbb5980-fru7.jpg?x-oss-process=style/jmq200
200 OK 8.8 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/cb/7e/912b91a58ebcf9f6fc919fbb5980-fru7.jpg?x-oss-process=style/jmq200
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash d7ac547058fdecb5acd5ac772992d258
7e50ac695e80dc8552eb46dc8d3cb4c9ef660145
7a84b3bb46d64a0ffe81c7b8b30e6987d5f40876d0a7c19da8658bb89f3d2fbb
GET /sg/res/jpg/cb/7e/912b91a58ebcf9f6fc919fbb5980-fru7.jpg?x-oss-process=style/jmq200 HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 8751
server: AliyunOSS
x-oss-request-id: 63AC6D68A87B9A39369CF9B1
last-modified: Wed, 19 Jan 2022 07:10:15 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 37
x-oss-hash-crc64ecma: 14822277156441796916
date: Wed, 11 Jan 2023 16:23:38 GMT
etag: "CB7E912B91A58EBCF9F6FC919FBB5980"
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QWtCAOoMqDyJeb5DGRvPJpgNcAlGt-ommAYk0eMk_giEHzsN1M_IjQ==
age: 587303
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
sg-res.9appsdownloading.com/sg/res/jpg/3b/09/79e3d5ed8ae559e467b9084bfd77-1ev4.jpg?x-oss-process=style/jmq200
200 OK 4.3 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/3b/09/79e3d5ed8ae559e467b9084bfd77-1ev4.jpg?x-oss-process=style/jmq200
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash c2c2ccef3ad79f66c3efe9ed6468183d
6d996efaa12a75a005dbccb7848969182bf6496f
4f41760b6ca0b088366fbd6ab3b6b4aea13612596994e8dfbdc5aefe7639d94b
Analyzer Verdict Alert fortinet Malware
GET /sg/res/jpg/3b/09/79e3d5ed8ae559e467b9084bfd77-1ev4.jpg?x-oss-process=style/jmq200 HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 4294
server: AliyunOSS
x-oss-request-id: 63A6A3145676773937D65B0C
last-modified: Thu, 02 Dec 2021 03:53:33 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 126
x-oss-hash-crc64ecma: 475190793687203182
date: Sat, 07 Jan 2023 06:58:48 GMT
etag: "3B0979E3D5ED8AE559E467B9084BFD77"
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IvK22_zcuO3_ejCqc5ZbHFgMHqby_CDoFc9zNTsu4L8uJ2zgdAb2OA==
age: 966793
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
sg-res.9appsdownloading.com/sg/res/jpg/12/27/f7edc0704ff99f73e0425d85ab5d-okc6.jpg?x-oss-process=style/jmq200
200 OK 3.6 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/12/27/f7edc0704ff99f73e0425d85ab5d-okc6.jpg?x-oss-process=style/jmq200
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash 873b47709fce5cc852f468d25a6fe2b8
d543a2c8e82ee263f54996454d965d2c2b391d62
22e8e081593343370c8e04fa6d33a898854fdbabd9fbe268fbb0b1498e325177
GET /sg/res/jpg/12/27/f7edc0704ff99f73e0425d85ab5d-okc6.jpg?x-oss-process=style/jmq200 HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3589
server: AliyunOSS
date: Thu, 12 Jan 2023 00:17:55 GMT
x-oss-request-id: 63BF51B3108AF53737F99599
etag: "1227F7EDC0704FF99F73E0425D85AB5D"
last-modified: Fri, 14 May 2021 23:51:46 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 37
x-oss-hash-crc64ecma: 13777026287321121151
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6Qu6mhGIauIyLmypQtxPYDavs0kGp1UAj2xt7VtXM4GEzuMOlImT1A==
age: 558846
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
sg-res.9appsdownloading.com/sg/res/jpg/c6/d1/53b35b0d1daed6fa3b6fc10c7253-pwd.jpg?x-oss-process=style/jmq200
200 OK 4.2 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/c6/d1/53b35b0d1daed6fa3b6fc10c7253-pwd.jpg?x-oss-process=style/jmq200
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash 78748d819628072f4a840d165b270604
2f71498b4fcf9c4fb4501c5b1191cb34b4c96213
22760411dcea879e0e2ef8a6d29b153627111e5951073b68b64c94dfbb02b848
Analyzer Verdict Alert fortinet Malware
GET /sg/res/jpg/c6/d1/53b35b0d1daed6fa3b6fc10c7253-pwd.jpg?x-oss-process=style/jmq200 HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 4232
server: AliyunOSS
date: Wed, 11 Jan 2023 04:43:05 GMT
x-oss-request-id: 63BE3E59AA0DCC3431057C56
etag: "C6D153B35B0D1DAED6FA3B6FC10C7253"
last-modified: Fri, 18 Sep 2020 07:51:54 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 43
x-oss-hash-crc64ecma: 16173300796229707048
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fsl2bKgb9woKZz5UNTe6VpgXCLHCnWHCa7_7vBXuXVkzvqpTTfa3Vw==
age: 629336
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
sg-res.9appsdownloading.com/sg/res/jpg/80/ef/668dfe936edbdab33cab91ebf943-3f96.jpg?x-oss-process=style/jmq200
200 OK 3.7 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/80/ef/668dfe936edbdab33cab91ebf943-3f96.jpg?x-oss-process=style/jmq200
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash fdc4d5a22ab84f968f75986785f2e3c6
323db9366130e3a061d6df1262c1b117345e5006
8a9bdfc26be8ca5d753960df69c9105384320f76f888bae340365a16da8cfbab
GET /sg/res/jpg/80/ef/668dfe936edbdab33cab91ebf943-3f96.jpg?x-oss-process=style/jmq200 HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3680
server: AliyunOSS
x-oss-request-id: 63AE6ABA23193837399981FF
last-modified: Sat, 15 May 2021 19:10:37 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 121
x-oss-hash-crc64ecma: 6960429715872451984
date: Fri, 13 Jan 2023 04:36:18 GMT
etag: "80EF668DFE936EDBDAB33CAB91EBF943"
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aq-Ok68hfTDhipQsUvDhQ-dYfYzPqMoiM5cMeuPA949ykOooCk_BPw==
age: 456943
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
sg-res.9appsdownloading.com/sg/res/jpg/3b/fd/0adf5c8fccbf74269daf886dc05e-0d63.jpg?x-oss-process=style/jmq200
200 OK 2.5 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/3b/fd/0adf5c8fccbf74269daf886dc05e-0d63.jpg?x-oss-process=style/jmq200
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash 9a7d736956b30898fab3fe20bb2b03a8
09e318c535f8b2fbb6c796178a773280a2b5d2ae
f8fd9158ad6d0bc424167847a805c51c16ae50f9cab13b6f0ee13a06442b69dd
GET /sg/res/jpg/3b/fd/0adf5c8fccbf74269daf886dc05e-0d63.jpg?x-oss-process=style/jmq200 HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2472
server: AliyunOSS
date: Wed, 11 Jan 2023 21:22:03 GMT
x-oss-request-id: 63BF287BE702E23639F30CF2
etag: "3BFD0ADF5C8FCCBF74269DAF886DC05E"
last-modified: Sun, 16 May 2021 04:18:04 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 73
x-oss-hash-crc64ecma: 13251300110893416495
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ERVrdyumsQZ-c3XnYSYh5kxY5IFhE2ao9-C5YUjtmel6oCiEwZXCcQ==
age: 569398
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
sg-res.9appsdownloading.com/sg/res/jpg/64/24/37ceacb6fd6e8ecd2330deda7c1d-dch1.jpg?x-oss-process=style/jmq200
200 OK 2.1 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/64/24/37ceacb6fd6e8ecd2330deda7c1d-dch1.jpg?x-oss-process=style/jmq200
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash a34f3639564b5727568851c27619b8f8
4348cccd69fd9ec745ee09476c9bbe0448997fcc
8f2ab722442f26d07ff4decc492d96485af727bdf6c31073ce89c62876e76df9
GET /sg/res/jpg/64/24/37ceacb6fd6e8ecd2330deda7c1d-dch1.jpg?x-oss-process=style/jmq200 HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2064
server: AliyunOSS
date: Sat, 07 Jan 2023 01:51:50 GMT
x-oss-request-id: 63B8D036FEEE6A3935EDAF23
etag: "642437CEACB6FD6E8ECD2330DEDA7C1D"
last-modified: Sat, 15 May 2021 21:04:02 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 34
x-oss-hash-crc64ecma: 4604755718110870598
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3sCB_tjXj4xiU8LXQApMOKr01_SHN7o1uGzdmHvvSJP7F96n7P7jrg==
age: 985211
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
sg-res.9appsdownloading.com/sg/res/jpg/ce/0e/5d9271547d9522fc28eff4478a22-wd61.jpg?x-oss-process=style/jmq200
200 OK 3.4 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/ce/0e/5d9271547d9522fc28eff4478a22-wd61.jpg?x-oss-process=style/jmq200
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash bf15494b2fcc7cde4ac6bb44c97e7594
57b91d8e2ac213fe535d05452e43069768db7b09
37e11e038e4ae9694b202d5caaca45858e4006ffc777f82f424762ca3cd7ef35
GET /sg/res/jpg/ce/0e/5d9271547d9522fc28eff4478a22-wd61.jpg?x-oss-process=style/jmq200 HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3389
server: AliyunOSS
x-oss-request-id: 63AB1C10637FD23938E5E146
last-modified: Sat, 15 May 2021 11:39:30 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 38
x-oss-hash-crc64ecma: 8168788912938306132
date: Tue, 10 Jan 2023 16:24:46 GMT
etag: "CE0E5D9271547D9522FC28EFF4478A22"
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5UZZoU-aY-msoiEwwb_4S9ufHt9_d3iYSnY0BQfsYCJRFjit-pfUeQ==
age: 673635
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
sg-res.9appsdownloading.com/sg/res/jpg/7b/b6/b0fb012b127a516fffaa482fd6ef-qtq.jpg?x-oss-process=style/jmq200
200 OK 4.1 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/7b/b6/b0fb012b127a516fffaa482fd6ef-qtq.jpg?x-oss-process=style/jmq200
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash 3f5d91d2f50ffa3c32ba4556b5a36000
2c52e78d98fb4b97b1286fad168eb01163189a97
d89186746ed4be343ea2dc680b0ac6603d6ed762f091207a498ddcd4cf506401
GET /sg/res/jpg/7b/b6/b0fb012b127a516fffaa482fd6ef-qtq.jpg?x-oss-process=style/jmq200 HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 4132
server: AliyunOSS
x-oss-request-id: 63AA1009F397E231303EC4C9
last-modified: Fri, 18 Sep 2020 07:51:54 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 50
x-oss-hash-crc64ecma: 16321027956068794137
date: Mon, 09 Jan 2023 21:20:28 GMT
etag: "7BB6B0FB012B127A516FFFAA482FD6EF"
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sQzAAcBtEd_Dn2Nbv5PRR_Mrcywhg93SpMIrmPEMFc3ugX8A4y9bcA==
age: 742293
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
sg-res.9appsdownloading.com/sg/res/jpg/f4/8f/4b3924b957e317bd94eff1b934bb-s4z6.jpg?x-oss-process=style/jmq200
200 OK 10 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/f4/8f/4b3924b957e317bd94eff1b934bb-s4z6.jpg?x-oss-process=style/jmq200
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash 7f6fdfa73322e23b8f75dde3fdc26e87
ffbbd84b57a3ac86d547bf1aaa9fb085ed2bf512
498da4ec7d54bf8e4f1b07db50c3b15c39c777c5de2c4c5acecd80d97fef086c
GET /sg/res/jpg/f4/8f/4b3924b957e317bd94eff1b934bb-s4z6.jpg?x-oss-process=style/jmq200 HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 10382
server: AliyunOSS
date: Mon, 16 Jan 2023 03:52:05 GMT
x-oss-request-id: 63C4C9E55ADBFC3635CE34C2
etag: "F48F4B3924B957E317BD94EFF1B934BB"
last-modified: Thu, 18 Aug 2022 16:19:52 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 52
x-oss-hash-crc64ecma: 8731295014224431878
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PMdErS_XWg9rgOXJ6c88v2XaG3B7mG-bWv0s4vc0xiqcWM1yUWdh2A==
age: 200395
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
sg-res.9appsdownloading.com/sg/res/jpg/28/49/dbafaa7c4585c1861a2c7de4dc5e-drd8.jpg?x-oss-process=style/jmq200
200 OK 6.9 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/28/49/dbafaa7c4585c1861a2c7de4dc5e-drd8.jpg?x-oss-process=style/jmq200
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash 274ab3eb5b6dbae36494b878f6282a28
1f8c4dce3fcbc62037d8862189e9ca3b04a80d6f
874a28df2f56c60f3da1fe9a8c6df774eb8d9f287c7f91dbaca8856b8d354f85
Analyzer Verdict Alert fortinet Malware
GET /sg/res/jpg/28/49/dbafaa7c4585c1861a2c7de4dc5e-drd8.jpg?x-oss-process=style/jmq200 HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 6872
server: AliyunOSS
date: Mon, 16 Jan 2023 03:52:05 GMT
x-oss-request-id: 63C4C9E5BEB4E13436793066
etag: "2849DBAFAA7C4585C1861A2C7DE4DC5E"
last-modified: Wed, 20 Jan 2021 10:26:10 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 87
x-oss-hash-crc64ecma: 16611545900083426653
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HHt2tnkpTIJFbVxBQf0JTM_Bht-c9V6dzUBum_yq6Zh_7oz0exoV5Q==
age: 200396
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
sg-res.9appsdownloading.com/sg/res/jpg/a8/7c/66ae50f569439462ffe1fdc503ce-8l9.jpg
200 OK 12 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/a8/7c/66ae50f569439462ffe1fdc503ce-8l9.jpg
IP
File type PNG image data, 320 x 480, 8-bit/color RGB, non-interlaced\012- data
Hash a87c66ae50f569439462ffe1fdc503ce
9aafccdc427299feb2bdadfab241c0d68144b3ea
b489790b7c85a8fe7ffd7f9edcb9d2b215be21d0487de8e9c4daa031e07d9d93
GET /sg/res/jpg/a8/7c/66ae50f569439462ffe1fdc503ce-8l9.jpg HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 12428
server: AliyunOSS
date: Wed, 18 Jan 2023 11:20:39 GMT
x-oss-request-id: 63C7D607F397E23732638DD9
accept-ranges: bytes
etag: "A87C66AE50F569439462FFE1FDC503CE"
last-modified: Mon, 07 Sep 2020 14:10:58 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 4088740486525226329
x-oss-storage-class: Standard
content-md5: qHxmrlD1aUOUYv/h/cUDzg==
x-oss-server-time: 133
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3OYNcYlMPGd3kx9s7uWFfgsmR9f3E1_9BWsKqbF4Zg643Iek6cBPtw==
age: 682
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
sg-res.9appsdownloading.com/sg/res/jpg/c0/85/1ebbec4a8f7241e2502ed312bd85-7wf.jpg
200 OK 21 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/c0/85/1ebbec4a8f7241e2502ed312bd85-7wf.jpg
IP
File type PNG image data, 320 x 480, 8-bit/color RGB, non-interlaced\012- data
Hash c0851ebbec4a8f7241e2502ed312bd85
bc020545c6e15cc27b075b71ed4ad540eebcac38
aa7f45e5eeb4b5c023c02bf2b2ade4eff4fe02e190043f58814d575309014c64
GET /sg/res/jpg/c0/85/1ebbec4a8f7241e2502ed312bd85-7wf.jpg HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 20599
server: AliyunOSS
date: Wed, 18 Jan 2023 11:20:39 GMT
x-oss-request-id: 63C7D6070900E634326AA9A6
accept-ranges: bytes
etag: "C0851EBBEC4A8F7241E2502ED312BD85"
last-modified: Mon, 07 Sep 2020 14:10:57 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 15004361455372657005
x-oss-storage-class: Standard
content-md5: wIUeu+xKj3JB4lAu0xK9hQ==
x-oss-server-time: 30
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Xjc8j58Cmtzi1Nfuss1NTZuYTHWENbaW59o9lPf63bD1PB-TayUw2g==
age: 682
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
sg-res.9appsdownloading.com/sg/res/jpg/27/50/49d728984db3f58a5af3f1c81b20-j8f.jpg
200 OK 20 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/27/50/49d728984db3f58a5af3f1c81b20-j8f.jpg
IP
File type PNG image data, 320 x 480, 8-bit/color RGB, non-interlaced\012- data
Hash 275049d728984db3f58a5af3f1c81b20
4ada9bb883e6e6408ad1a619f3867cceb81bcfec
8096d5beeba537321800161785069c6ba765504899d870615df6f1c154fd8324
GET /sg/res/jpg/27/50/49d728984db3f58a5af3f1c81b20-j8f.jpg HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 19747
server: AliyunOSS
date: Wed, 18 Jan 2023 11:20:39 GMT
x-oss-request-id: 63C7D60736F90D3237672994
accept-ranges: bytes
etag: "275049D728984DB3F58A5AF3F1C81B20"
last-modified: Mon, 07 Sep 2020 14:10:58 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 7370758828075528862
x-oss-storage-class: Standard
content-md5: J1BJ1yiYTbP1ilrz8cgbIA==
x-oss-server-time: 57
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ehMhkjaa0GzTQK_j3bITveyzPCp6BY0TYeljAx9bkGjDXIRvrcnQCA==
age: 682
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
sg-res.9appsdownloading.com/sg/res/jpg/d6/89/5c0fab7e52704b3c0abb425584ab-6vm1.jpg
200 OK 76 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/d6/89/5c0fab7e52704b3c0abb425584ab-6vm1.jpg
IP
File type PNG image data, 288 x 512, 8-bit/color RGB, non-interlaced\012- data
Hash d6895c0fab7e52704b3c0abb425584ab
b095160b63690c90cc6452c2dcef9008dfaa16a6
59f3f9c3b41f34f0dbfbb1ce52d72402ce4263641b701131fe993c47de38df7f
GET /sg/res/jpg/d6/89/5c0fab7e52704b3c0abb425584ab-6vm1.jpg HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 76290
server: AliyunOSS
date: Wed, 18 Jan 2023 11:20:39 GMT
x-oss-request-id: 63C7D607A87B9A34376C8ABE
accept-ranges: bytes
etag: "D6895C0FAB7E52704B3C0ABB425584AB"
last-modified: Mon, 07 Sep 2020 14:10:59 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8498491385915965188
x-oss-storage-class: Standard
content-md5: 1olcD6t+UnBLPAq7QlWEqw==
x-oss-server-time: 38
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: P3lI4zEwqHEOFP2_gyVRI1c-LOZGRiNoe83qYMWk9J6JdWkEJWztRA==
age: 682
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
www.9apps.com/android-apps/CricInstantCricketScores
200 OK 14 kB URL HTTP/2 www.9apps.com/android-apps/CricInstantCricketScores
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (550), with CRLF, LF line terminators
Hash 1e2e61fd1883cfa3d61a9f28bbec2f4f
3ad3ced6261ffa24d637341e76e54e41da0c2f06
d7b9dbdd22e70e05c0977f4dbdf7e84b17774a2710585259785eef0088cde8b2
GET /android-apps/CricInstantCricketScores HTTP/1.1
Host: www.9apps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 18 Jan 2023 11:32:00 GMT
content-type: text/html; charset=utf-8
cf-ray: 78b701edcd890b31-OSL
cache-control: public, max-age=14400
expires: Wed, 18 Jan 2023 15:32:00 GMT
last-modified: Wed, 18 Jan 2023 11:32:00 GMT
vary: Accept-Encoding
cf-cache-status: MISS
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-readtime: 41
x-response-time: 30
x-xss-protection: 1; mode=block
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: mXDf2XxCrKkJLv5MMq5CqA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: SEKpsM6uPWsPUS0TwKUi6c+WiXY=
sg-res.9appsdownloading.com/sg/res/jpg/95/fb/34ee901b53b5dfd607612a687c13-c9y4.jpg
200 OK 231 kB URL HTTP/2 sg-res.9appsdownloading.com/sg/res/jpg/95/fb/34ee901b53b5dfd607612a687c13-c9y4.jpg
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size 231 kB (231024 bytes)
Hash 95fb34ee901b53b5dfd607612a687c13
a2d800d3f16e2680d2b548b16821803d0bdb8b8c
909c15dfa1e2e9ae6975e2637700a76636e504ae2a9467e947e207e54de28a45
GET /sg/res/jpg/95/fb/34ee901b53b5dfd607612a687c13-c9y4.jpg HTTP/1.1
Host: sg-res.9appsdownloading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 231024
server: AliyunOSS
date: Wed, 18 Jan 2023 11:20:40 GMT
x-oss-request-id: 63C7D6082BFAC73337848B6C
accept-ranges: bytes
etag: "95FB34EE901B53B5DFD607612A687C13"
last-modified: Mon, 07 Sep 2020 14:10:57 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12978824715605476849
x-oss-storage-class: Standard
content-md5: lfs07pAbU7Xf1gdhKmh8Ew==
x-oss-server-time: 31
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: X17fcmFFtlIaUB0Ghska-VGz1cqweXU4irSrlzk3oxFlCpUj067NLg==
age: 681
cache-control: public, max-age=1382400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 2.9 kB IP
Hash aaa5b4fff2d846635987af6fb9f3d80c
9b0b8f486f0c86e2874daed9bb60642f6b3bda3c
cef07b089f316b0f95924d852122132e56d8d724a68a0eac707e138cf51d9942
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:32:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 977b4ae7ed6cf9a2eaec0bad14122f46
a452d67182403b94846ff20db8c76d3d612d2641
dca3212c674487f6071222d62ee7b9b0f25c5b18104bcc690f2436942e165711
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:32:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 977b4ae7ed6cf9a2eaec0bad14122f46
a452d67182403b94846ff20db8c76d3d612d2641
dca3212c674487f6071222d62ee7b9b0f25c5b18104bcc690f2436942e165711
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:32:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 977b4ae7ed6cf9a2eaec0bad14122f46
a452d67182403b94846ff20db8c76d3d612d2641
dca3212c674487f6071222d62ee7b9b0f25c5b18104bcc690f2436942e165711
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:32:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e7d3349e6da76cd19f99fe1c04096482
808decdfe73ff4f6a6fecca63f35fafc9d774f03
6cda8ccb829aca73ca5a2ebb589e69ace81033776ffb502b9def93bcff04fb4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:32:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 773596e36fe4af70225f1ee08e977461
5595433fd09a22008b2c739f6626aef116ad5285
fb18080471e9a54e7d1c060d2e26b023f09c135e0d195e48917cd064549d7fdc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:32:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 22 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
Hash b5efc8c5b0a65d7bab4ce7e587562449
4c0e194b6ca7aa8f1d3b012fe51a68329fcb72bc
e49c75ea29d52e2eed942f05b06cd6dc397ba7edebf91f25178e9574e1391940
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Wed, 18 Jan 2023 09:45:20 GMT
expires: Wed, 18 Jan 2023 11:45:20 GMT
cache-control: public, max-age=7200
age: 6401
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 773596e36fe4af70225f1ee08e977461
5595433fd09a22008b2c739f6626aef116ad5285
fb18080471e9a54e7d1c060d2e26b023f09c135e0d195e48917cd064549d7fdc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:32:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/j/collect?v=1&_v=j99&a=1746297643&t=pageview&_s=1&dl=https%3A%2F%2Fwww.9apps.com%2Fandroid-apps%2FCricInstantCricketScores&ul=en-us&de=UTF-8&dt=CricInstant%20Cricket%20Scores%20APK%20Download%202023%20-%20Free%20-%209Apps&sd=24-bit&sr=1280x1024&vp=1140x824&je=0&_u=YEDAAUABAAAAACAAI~&jid=1664055165&gjid=1844618893&cid=122274383.1674041522&tid=UA-61680264-1&_gid=567990088.1674041522&_r=1&_slc=1&z=1666358457
200 OK 4 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j99&a=1746297643&t=pageview&_s=1&dl=https%3A%2F%2Fwww.9apps.com%2Fandroid-apps%2FCricInstantCricketScores&ul=en-us&de=UTF-8&dt=CricInstant%20Cricket%20Scores%20APK%20Download%202023%20-%20Free%20-%209Apps&sd=24-bit&sr=1280x1024&vp=1140x824&je=0&_u=YEDAAUABAAAAACAAI~&jid=1664055165&gjid=1844618893&cid=122274383.1674041522&tid=UA-61680264-1&_gid=567990088.1674041522&_r=1&_slc=1&z=1666358457
IP
File type ASCII text, with no line terminators
Hash 9e92e190700c1af4539b40c2171320a9
209bcdb79e6067b51091ce8586d4b977f25b67d8
aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
POST /j/collect?v=1&_v=j99&a=1746297643&t=pageview&_s=1&dl=https%3A%2F%2Fwww.9apps.com%2Fandroid-apps%2FCricInstantCricketScores&ul=en-us&de=UTF-8&dt=CricInstant%20Cricket%20Scores%20APK%20Download%202023%20-%20Free%20-%209Apps&sd=24-bit&sr=1280x1024&vp=1140x824&je=0&_u=YEDAAUABAAAAACAAI~&jid=1664055165&gjid=1844618893&cid=122274383.1674041522&tid=UA-61680264-1&_gid=567990088.1674041522&_r=1&_slc=1&z=1666358457 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.9apps.com
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.9apps.com
date: Wed, 18 Jan 2023 11:32:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j99&a=1746297643&t=pageview&_s=1&dl=https%3A%2F%2Fwww.9apps.com%2Fandroid-apps%2FCricInstantCricketScores&ul=en-us&de=UTF-8&dt=CricInstant%20Cricket%20Scores%20APK%20Download%202023%20-%20Free%20-%209Apps&sd=24-bit&sr=1280x1024&vp=1140x824&je=0&_u=YEDAAUABAAAAACAAI~&jid=1499722845&gjid=1146848226&cid=122274383.1674041522&tid=UA-61680264-8&_gid=567990088.1674041522&_r=1&_slc=1&z=1019506844
200 OK 4 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j99&a=1746297643&t=pageview&_s=1&dl=https%3A%2F%2Fwww.9apps.com%2Fandroid-apps%2FCricInstantCricketScores&ul=en-us&de=UTF-8&dt=CricInstant%20Cricket%20Scores%20APK%20Download%202023%20-%20Free%20-%209Apps&sd=24-bit&sr=1280x1024&vp=1140x824&je=0&_u=YEDAAUABAAAAACAAI~&jid=1499722845&gjid=1146848226&cid=122274383.1674041522&tid=UA-61680264-8&_gid=567990088.1674041522&_r=1&_slc=1&z=1019506844
IP
File type ASCII text, with no line terminators
Hash 9e92e190700c1af4539b40c2171320a9
209bcdb79e6067b51091ce8586d4b977f25b67d8
aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
POST /j/collect?v=1&_v=j99&a=1746297643&t=pageview&_s=1&dl=https%3A%2F%2Fwww.9apps.com%2Fandroid-apps%2FCricInstantCricketScores&ul=en-us&de=UTF-8&dt=CricInstant%20Cricket%20Scores%20APK%20Download%202023%20-%20Free%20-%209Apps&sd=24-bit&sr=1280x1024&vp=1140x824&je=0&_u=YEDAAUABAAAAACAAI~&jid=1499722845&gjid=1146848226&cid=122274383.1674041522&tid=UA-61680264-8&_gid=567990088.1674041522&_r=1&_slc=1&z=1019506844 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.9apps.com
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.9apps.com
date: Wed, 18 Jan 2023 11:32:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/-qZdbxCWoWqs/AAAAAAAAAAI/AAAAAAAAAAA/AMZuuck3HBfr0Lu4h2hZlZp58OKuDAmmAw/photo.jpg
200 OK 5.7 kB URL HTTP/2 lh3.googleusercontent.com/-qZdbxCWoWqs/AAAAAAAAAAI/AAAAAAAAAAA/AMZuuck3HBfr0Lu4h2hZlZp58OKuDAmmAw/photo.jpg
IP
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced\012- data
Hash 93c036013cdd068a54eac776d94a0e49
859ef8dd14ddce18d14b044bc54ff78f0506c97d
624167fd9ee4582b22337f1bd5a1b26e5826399c16cb6fc8933fc1d2cfd8a6b2
GET /-qZdbxCWoWqs/AAAAAAAAAAI/AAAAAAAAAAA/AMZuuck3HBfr0Lu4h2hZlZp58OKuDAmmAw/photo.jpg HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Thu, 19 Jan 2023 11:32:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename=""
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 18 Jan 2023 11:32:01 GMT
server: fife
content-length: 5672
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
play-lh.googleusercontent.com/-xIH2SRA4mGE/AAAAAAAAAAI/AAAAAAAAAAA/AMZuuckCjrRThmtWUXS_6S6H7r-mneIKFg/photo.jpg
200 OK 2.1 kB URL HTTP/2 play-lh.googleusercontent.com/-xIH2SRA4mGE/AAAAAAAAAAI/AAAAAAAAAAA/AMZuuckCjrRThmtWUXS_6S6H7r-mneIKFg/photo.jpg
IP
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced\012- data
Hash f376b851956a34a51d2cffaa7bb7c5c0
7dd0dd6333467f60f77f7f92a25fe81d88fb9b0f
80e46d566bcaf7114e96abbd73abeee02c245b4afd4acc6d40f1cb29fa05506a
GET /-xIH2SRA4mGE/AAAAAAAAAAI/AAAAAAAAAAA/AMZuuckCjrRThmtWUXS_6S6H7r-mneIKFg/photo.jpg HTTP/1.1
Host: play-lh.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Thu, 19 Jan 2023 11:32:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename=""
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 18 Jan 2023 11:32:01 GMT
server: fife
content-length: 2137
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
play-lh.googleusercontent.com/-mhyKWXCJNzM/AAAAAAAAAAI/AAAAAAAAAAA/AMZuucmPCMwJbOQq-cVtd4GcmNdKzRCERg/photo.jpg
200 OK 5.5 kB URL HTTP/2 play-lh.googleusercontent.com/-mhyKWXCJNzM/AAAAAAAAAAI/AAAAAAAAAAA/AMZuucmPCMwJbOQq-cVtd4GcmNdKzRCERg/photo.jpg
IP
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced\012- data
Hash 60de6f6de24cded961eb1f72d1a28750
49e10e7cf77d47ef9bd5f247039ea4de266b5553
20c0c450fad57fec50499fe3c0da1bfe8af0a6d30bca97e7a5228c6a1930a600
GET /-mhyKWXCJNzM/AAAAAAAAAAI/AAAAAAAAAAA/AMZuucmPCMwJbOQq-cVtd4GcmNdKzRCERg/photo.jpg HTTP/1.1
Host: play-lh.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Thu, 19 Jan 2023 11:32:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename=""
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 18 Jan 2023 11:32:01 GMT
server: fife
content-length: 5519
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
play-lh.googleusercontent.com/-hllfijBWce8/AAAAAAAAAAI/AAAAAAAAAAA/AMZuuckXumvfZG3qMND5uu7m1eGfq4frwA/photo.jpg
200 OK 6.1 kB URL HTTP/2 play-lh.googleusercontent.com/-hllfijBWce8/AAAAAAAAAAI/AAAAAAAAAAA/AMZuuckXumvfZG3qMND5uu7m1eGfq4frwA/photo.jpg
IP
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced\012- data
Hash eeeb5064eb34dd396e4838f2c73e019f
98bbf7a97abbe7aae7c851203368b778d4e2fdf3
30587e48854a7e38f99f745ee40c244a8e3001efd08c379ef17c4d7683c5573e
GET /-hllfijBWce8/AAAAAAAAAAI/AAAAAAAAAAA/AMZuuckXumvfZG3qMND5uu7m1eGfq4frwA/photo.jpg HTTP/1.1
Host: play-lh.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Thu, 19 Jan 2023 11:32:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename=""
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 18 Jan 2023 11:32:01 GMT
server: fife
content-length: 6111
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
play-lh.googleusercontent.com/-2FcEpypxbFE/AAAAAAAAAAI/AAAAAAAAAAA/AMZuucmLj8xeEJfArnbWFS1lKIVWWcNGyQ/photo.jpg
200 OK 7.3 kB URL HTTP/2 play-lh.googleusercontent.com/-2FcEpypxbFE/AAAAAAAAAAI/AAAAAAAAAAA/AMZuucmLj8xeEJfArnbWFS1lKIVWWcNGyQ/photo.jpg
IP
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced\012- data
Hash 55d8e09ebc6cb41d72ef33d8e2388ebf
51e1ddfe39568205dba52167404bebf1676c6a21
a643b82dd2330db9da13c98d9c987e5f1c0abe096a3ce4cd25d2aede9e0dcad2
GET /-2FcEpypxbFE/AAAAAAAAAAI/AAAAAAAAAAA/AMZuucmLj8xeEJfArnbWFS1lKIVWWcNGyQ/photo.jpg HTTP/1.1
Host: play-lh.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Thu, 19 Jan 2023 11:32:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename=""
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 18 Jan 2023 11:32:01 GMT
server: fife
content-length: 7304
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e7d3349e6da76cd19f99fe1c04096482
808decdfe73ff4f6a6fecca63f35fafc9d774f03
6cda8ccb829aca73ca5a2ebb589e69ace81033776ffb502b9def93bcff04fb4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:32:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 977b4ae7ed6cf9a2eaec0bad14122f46
a452d67182403b94846ff20db8c76d3d612d2641
dca3212c674487f6071222d62ee7b9b0f25c5b18104bcc690f2436942e165711
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:32:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
zerossl.ocsp.sectigo.com/
200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash d530ccfa10a7221b1db3539b5f7b39d6
be17aedc901a16aa850ea02f9f3b2f36974ef979
953f4de34f64f69795cddbf59900809fa3757e38d9774172ba6684839316a078
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 11:32:01 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 16 Jan 2023 04:01:16 GMT
Expires: Mon, 23 Jan 2023 04:01:15 GMT
Etag: "be17aedc901a16aa850ea02f9f3b2f36974ef979"
Cache-Control: max-age=404353,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78b701f76deb1c16-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6a6b2d9466c78838d5b89a24b1afc5f1
056b045d2648e975609cc689aace2cebf56dc4b8
87f1afd429d569be0ae89952298d447806d8c9d543b4ed8d2bc80cd9dc3d125d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:32:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.clarity.ms/eus2/s/0.7.1/clarity.js
200 OK 37 kB URL HTTP/2 www.clarity.ms/eus2/s/0.7.1/clarity.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 620906e21a30e77ada26a474a4d72118
509f27c93b249c99556d18e987601c00c14cf86e
656d2e8d78503c91322b2d83eb544526f3227f49df1ce2916710fa4dc71812ee
GET /eus2/s/0.7.1/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d928dd7500799e"
server: Microsoft-IIS/10.0
x-cache: TCP_HIT
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-azure-ref-originshield: 0UkzHYwAAAAB8DKre+HtXRqq/R0kdV7izRlJBMjMxMDUwNDE4MDE3ADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
x-azure-ref: 0sdjHYwAAAAAZRz480Y+YQ4AMk+LEzPxMQ1BIMzBFREdFMDQxMgA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Wed, 18 Jan 2023 11:32:00 GMT
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-61680264-8&cid=122274383.1674041522&jid=1499722845&gjid=1146848226&_gid=567990088.1674041522&_u=YEDAAUABAAAAACAAI~&z=898302736
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-61680264-8&cid=122274383.1674041522&jid=1499722845&gjid=1146848226&_gid=567990088.1674041522&_u=YEDAAUABAAAAACAAI~&z=898302736
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-61680264-8&cid=122274383.1674041522&jid=1499722845&gjid=1146848226&_gid=567990088.1674041522&_u=YEDAAUABAAAAACAAI~&z=898302736 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.9apps.com
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.9apps.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 18 Jan 2023 11:32:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-61680264-1&cid=122274383.1674041522&jid=1664055165&gjid=1844618893&_gid=567990088.1674041522&_u=YEDAAUAAAAAAACAAI~&z=1335384930
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-61680264-1&cid=122274383.1674041522&jid=1664055165&gjid=1844618893&_gid=567990088.1674041522&_u=YEDAAUAAAAAAACAAI~&z=1335384930
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-61680264-1&cid=122274383.1674041522&jid=1664055165&gjid=1844618893&_gid=567990088.1674041522&_u=YEDAAUAAAAAAACAAI~&z=1335384930 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.9apps.com
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.9apps.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 18 Jan 2023 11:32:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6a6b2d9466c78838d5b89a24b1afc5f1
056b045d2648e975609cc689aace2cebf56dc4b8
87f1afd429d569be0ae89952298d447806d8c9d543b4ed8d2bc80cd9dc3d125d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:32:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/a-/AOh14GhS1lnTCJrxUz_J-Dq_ZqnU1m5lKiazPeV1PUJB
200 OK 12 kB URL HTTP/2 lh3.googleusercontent.com/a-/AOh14GhS1lnTCJrxUz_J-Dq_ZqnU1m5lKiazPeV1PUJB
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 159x159, components 3\012- data
Hash 9017d62730887541513ac33b622ce0de
36e8f6a1b4bebe578a7715f9466ab2e0953afef0
b70f55ddeb1b9b79c87b4373096d603e02eb3a178764d6353d34538cda337a30
GET /a-/AOh14GhS1lnTCJrxUz_J-Dq_ZqnU1m5lKiazPeV1PUJB HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v64"
expires: Thu, 19 Jan 2023 11:32:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 18 Jan 2023 11:32:01 GMT
server: fife
content-length: 12378
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e1c7515ba5231aaae042ef63071a8562
676673d88597e11f572ac38844b18562ab57b920
002b5adabb3fb37aa6c0f18adee2f221a770e217fe95a027fcf8b8fe84794a19
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:32:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 38de5599544ffa789bad3f8686808c5e
fa442ea8ec124d47130fe75d0e848330a279e19e
d0344819ecf4cb1795fcd668d5f1a806121a48e174588ecd2eb8751595ac61ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:32:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e1c7515ba5231aaae042ef63071a8562
676673d88597e11f572ac38844b18562ab57b920
002b5adabb3fb37aa6c0f18adee2f221a770e217fe95a027fcf8b8fe84794a19
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:32:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 38de5599544ffa789bad3f8686808c5e
fa442ea8ec124d47130fe75d0e848330a279e19e
d0344819ecf4cb1795fcd668d5f1a806121a48e174588ecd2eb8751595ac61ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:32:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-61680264-8&cid=122274383.1674041522&jid=1499722845&_u=YEDAAUABAAAAACAAI~&z=1633895560
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-61680264-8&cid=122274383.1674041522&jid=1499722845&_u=YEDAAUABAAAAACAAI~&z=1633895560
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-61680264-8&cid=122274383.1674041522&jid=1499722845&_u=YEDAAUABAAAAACAAI~&z=1633895560 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 11:32:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-61680264-8&cid=122274383.1674041522&jid=1499722845&_u=YEDAAUABAAAAACAAI~&z=1633895560
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-61680264-8&cid=122274383.1674041522&jid=1499722845&_u=YEDAAUABAAAAACAAI~&z=1633895560
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-61680264-8&cid=122274383.1674041522&jid=1499722845&_u=YEDAAUABAAAAACAAI~&z=1633895560 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 11:32:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-61680264-1&cid=122274383.1674041522&jid=1664055165&_u=YEDAAUAAAAAAACAAI~&z=456606442
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-61680264-1&cid=122274383.1674041522&jid=1664055165&_u=YEDAAUAAAAAAACAAI~&z=456606442
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-61680264-1&cid=122274383.1674041522&jid=1664055165&_u=YEDAAUAAAAAAACAAI~&z=456606442 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 11:32:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-61680264-1&cid=122274383.1674041522&jid=1664055165&_u=YEDAAUAAAAAAACAAI~&z=456606442
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-61680264-1&cid=122274383.1674041522&jid=1664055165&_u=YEDAAUAAAAAAACAAI~&z=456606442
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-61680264-1&cid=122274383.1674041522&jid=1664055165&_u=YEDAAUAAAAAAACAAI~&z=456606442 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 18 Jan 2023 11:32:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 43904744042cec16f81766250b8ebf49
8393568a2e9c86dafc36563c76703704c7cd86c6
d2359c7cce5176a68cd627ba7e39dfceff78036c6840cd468994df8519f1fb27
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:32:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 38de5599544ffa789bad3f8686808c5e
fa442ea8ec124d47130fe75d0e848330a279e19e
d0344819ecf4cb1795fcd668d5f1a806121a48e174588ecd2eb8751595ac61ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 11:32:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c.clarity.ms/c.gif
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=CE81B755378546E1B1E4B5C001CBF3B9&RedC=c.clarity.ms&MXFR=1E2A79DF34DF6A0C13166B4230DF643F
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=1E2A79DF34DF6A0C13166B4230DF643F; domain=.clarity.ms; expires=Mon, 12-Feb-2024 11:32:02 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Wed, 18 Jan 2023 11:32:01 GMT
content-length: 0
X-Firefox-Spdy: h2
api.9apps.com/api/appstore-9appscom/getOfficialUrl
200 OK 954 B URL HTTP/2 api.9apps.com/api/appstore-9appscom/getOfficialUrl
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Hash ca697765adfb2b408794faef11d397a8
a4a45c1a07d80360a57bf960126f2c5c9a99396e
6e85904e3ad5552aa5c3f49f85fd9143b6cfe99ea9d28b729b5506ae6c78e8b6
GET /api/appstore-9appscom/getOfficialUrl HTTP/1.1
Host: api.9apps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.9apps.com/android-apps/CricInstantCricketScores
Origin: https://www.9apps.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 11:32:02 GMT
content-type: application/json; charset=utf-8
content-length: 443
accept-ranges: bytes
set-cookie: csrfToken=iCrcJ9ts7WClHEjLYTMia6Lo; path=/
iawnmcc=404; path=/; max-age=2592000; expires=Fri, 17 Feb 2023 11:32:02 GMT; domain=*.9apps.com
iawchannel=9999; path=/; max-age=2592000; expires=Fri, 17 Feb 2023 11:32:02 GMT; domain=*.9apps.com
iawla=en; path=/; max-age=2592000; expires=Fri, 17 Feb 2023 11:32:02 GMT; domain=*.9apps.com
iawsourcetype=none; path=/; max-age=2592000; expires=Fri, 17 Feb 2023 11:32:02 GMT; domain=*.9apps.com
iawsid=c1eb8dd966fe97d995353e4ddf57528a95b5ab69; path=/; max-age=2592000; expires=Fri, 17 Feb 2023 11:32:02 GMT; domain=*.9apps.com
iawhost=sgb-redis-recotf-002; path=/; domain=*.9apps.com
x-response-time: 0
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-readtime: 3
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-origin: *
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=CE81B755378546E1B1E4B5C001CBF3B9&RedC=c.clarity.ms&MXFR=1E2A79DF34DF6A0C13166B4230DF643F
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=CE81B755378546E1B1E4B5C001CBF3B9&RedC=c.clarity.ms&MXFR=1E2A79DF34DF6A0C13166B4230DF643F
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=CE81B755378546E1B1E4B5C001CBF3B9&RedC=c.clarity.ms&MXFR=1E2A79DF34DF6A0C13166B4230DF643F HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.9apps.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=CE81B755378546E1B1E4B5C001CBF3B9&MUID=2A96BABBA28168980B30A826A374695D
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=2A96BABBA28168980B30A826A374695D; domain=c.bing.com; expires=Mon, 12-Feb-2024 11:32:02 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: C93C52E2C4A54A59A7015C0C3B9C29C4 Ref B: OSL30EDGE0111 Ref C: 2023-01-18T11:32:02Z
date: Wed, 18 Jan 2023 11:32:01 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=CE81B755378546E1B1E4B5C001CBF3B9&MUID=2A96BABBA28168980B30A826A374695D
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=CE81B755378546E1B1E4B5C001CBF3B9&MUID=2A96BABBA28168980B30A826A374695D
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=CE81B755378546E1B1E4B5C001CBF3B9&MUID=2A96BABBA28168980B30A826A374695D HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.9apps.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Tue, 17 Jan 2023 20:36:49 GMT
accept-ranges: bytes
etag: "b1c8df6cb32ad91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Wed, 18-Jan-2023 11:42:02 GMT; path=/; SameSite=None; Secure;
date: Wed, 18 Jan 2023 11:32:01 GMT
content-length: 42
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 633
Origin: https://www.9apps.com
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://www.9apps.com
access-control-allow-credentials: true
date: Wed, 18 Jan 2023 11:32:02 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13547
Expires: Wed, 18 Jan 2023 15:17:49 GMT
Date: Wed, 18 Jan 2023 11:32:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13547
Expires: Wed, 18 Jan 2023 15:17:49 GMT
Date: Wed, 18 Jan 2023 11:32:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13547
Expires: Wed, 18 Jan 2023 15:17:49 GMT
Date: Wed, 18 Jan 2023 11:32:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13547
Expires: Wed, 18 Jan 2023 15:17:49 GMT
Date: Wed, 18 Jan 2023 11:32:02 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce2d78c9-2134-471e-bdb1-875c1b61ff8b.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce2d78c9-2134-471e-bdb1-875c1b61ff8b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4ec6c49f056e786896d54fe22c242391
cc6b64ff3f09853843b62e555456a1ad9f0909fb
42f0571efba18630c8deee17e98c6939a7050b04f613ad10515caf503e496b4d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce2d78c9-2134-471e-bdb1-875c1b61ff8b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5663
x-amzn-requestid: 9a1c75a4-1c8d-4bd2-b6ca-7fccb8b43c12
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e6A0gF5goAMFveA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c714e9-1d274e8074771db651e80979;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 21:36:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: sAxuQECVKx0dfc2UM_E_70nKN8za1SBN4opMWr_74gT5ScurgZGVLw==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 22:10:07 GMT
age: 48115
etag: "cc6b64ff3f09853843b62e555456a1ad9f0909fb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6543a616-79f5-4c5d-8f34-be53cb4c622d.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6543a616-79f5-4c5d-8f34-be53cb4c622d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d134f7ac9a5ca8ab7a9461bd20706bb7
aa47af3e7517390d10e89f0f18237cfdcc63cbed
3431c8027f09bb284fe48ef8e4458fd43d8cc961250601b3028b83a7ba19f6ce
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6543a616-79f5-4c5d-8f34-be53cb4c622d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13111
x-amzn-requestid: 7a9bb405-c68d-496f-b608-e9d295c44c50
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e0MStGBBIAMFXag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c4c0dd-75d87c0d763744951f13febd;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 03:13:33 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jkIL919Q7OFO6bACXTrDan0f9D9rgrN0DJMQv1DYPLeWqT1CywCAEg==
via: 1.1 1ec2938341958d70d56193d709c89dee.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 03:29:16 GMT
age: 28966
etag: "aa47af3e7517390d10e89f0f18237cfdcc63cbed"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1983f844-6675-400d-b957-26ce8e636ae7.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1983f844-6675-400d-b957-26ce8e636ae7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 015e1f23253643036d718d5a785be61b
55b5ce93ba3ab53b227aa1fdb60b6062d35ae2f0
78045e55e5e9966b1fddb9e3f734972611ea78e7cb78b92beb2e4adf56f724ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1983f844-6675-400d-b957-26ce8e636ae7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8939
x-amzn-requestid: 5fbb2a5d-5731-4fb0-8b95-cc59338862de
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e6A1nGMvoAMFrQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c714f0-14de6c94416a9ced1c284d5b;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 21:36:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xtPNgaK-8fYccAq_D-bA7rVmM2tq5-prvjbnn2yhlOVr_yT9uxYxdg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 22:10:07 GMT
age: 48115
etag: "55b5ce93ba3ab53b227aa1fdb60b6062d35ae2f0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc498ee0b-a2b9-47cf-8161-03c86caa8c9f.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc498ee0b-a2b9-47cf-8161-03c86caa8c9f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 822378a3438fdf79b5ae81c485cf9a9c
7e7c3f015d1478c7dc0c108fc0bf6e74cb00d37a
345345df1e67f4700a81059901cc4050196910c9dd2f635197301c21e420eee4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc498ee0b-a2b9-47cf-8161-03c86caa8c9f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5213
x-amzn-requestid: 324586fa-41fa-4995-a9d9-3bfbddea69f0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e0LSaEdgIAMFnjw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c4bf42-51c2249d0761a5146a8d20fb;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 03:06:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: LXZFvt44IpTLZioHxzJ4q7GakB_10TdOSufsVcm0dY9LBgOoDQtmYg==
via: 1.1 0cf6c59c77f0fff670ae085179adc458.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 04:50:29 GMT
age: 24093
etag: "7e7c3f015d1478c7dc0c108fc0bf6e74cb00d37a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ce66831-56e0-4f6e-ba05-da99c3485e5e.jpeg
200 OK 3.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ce66831-56e0-4f6e-ba05-da99c3485e5e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 928e970121a035e9f8d537e4bfe6bf5c
ce4aadc6b3500508d1c4b42b76f09be4414b6eee
2da1438b17cf05aed64e565350dcc706420f2bae7e8c5e36d1b5bad38248c275
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ce66831-56e0-4f6e-ba05-da99c3485e5e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3599
x-amzn-requestid: 5b743b27-b6d4-4d98-9984-3a5e17cb28e6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e6A1xH8BIAMFuZQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c714f1-2f1031db0871abae4760d5b6;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 21:36:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: smM0mXHWYzOZzuSEzRIAzz6WEJEFNI0ysTBFSz1P_gcZMdEwfxSEYA==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 21:52:59 GMT
age: 49143
etag: "ce4aadc6b3500508d1c4b42b76f09be4414b6eee"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a78cd6d-1eab-47b0-b5c7-f2d1f91acc3a.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a78cd6d-1eab-47b0-b5c7-f2d1f91acc3a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3f112ea3865f38cbbcc8400b58320fa0
dacc584338546bf60f26b2a0bec48e9b584640dc
7feb3c0691f40354701d1cb0bf3c834d1eeead4a7297fac3afc0f4a7ca2c94cb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a78cd6d-1eab-47b0-b5c7-f2d1f91acc3a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8853
x-amzn-requestid: ff98ec33-294a-4a13-b064-3cd4744cd2b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e0LLKHPnIAMF0vQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c4bf14-233cbc6407c6b138144d7abb;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 03:05:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QZZaGtGl3Z-4G4DxO4R_gjfDdQVgJc30Ur9EyLAvbGFhv4LfaXziPQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 22:21:58 GMT
etag: "dacc584338546bf60f26b2a0bec48e9b584640dc"
content-type: image/jpeg
age: 47404
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.clarity.ms/tag/4dvznah4pf
200 OK 0 B URL HTTP/2 www.clarity.ms/tag/4dvznah4pf
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /tag/4dvznah4pf HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.9apps.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=10d6e05f72e0449fa46c97f592447090.20230118.20240118; expires=Thu, 18 Jan 2024 11:32:01 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:b1d896b3-bec7-448b-b764-240152e813e8
x-cache: CONFIG_NOCACHE
x-azure-ref: 0sdjHYwAAAAAgtOXNO6c1RbOSVkws9pYlQ1BIMzBFREdFMDQxMgA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Wed, 18 Jan 2023 11:32:00 GMT
X-Firefox-Spdy: h2
104.18.12.170
54.230.111.62
95.101.11.115
93.184.220.29
47.241.15.144