entry.gozofinder.com/redirect/v2/rwEZFmA0px11G2IeXl9znJkyY1DkBQIhIUA2pmAPGF9xnJHgnTy0YJqcM2ShqTIhYGVjZGRgLzImqP1iMv04ZUZgpzSlVlSnE1V1DxqFZycgETkOHHI4GHcJZycUFTkPE3OfDHtkHSbmDHqUFKyVFxy5I3OEI3qOnw09YGALEGqunSui?language=cs&service=ulozto&userSessionId=9600c322-9493-435c-9bb2-b7a0b7fd08f8&platform=web&errorUrl=https://gozofinder.com/cse/ulozto/cz/file-not-found?platform=web&rateLimitingUrl=https://gozofinder.com/cse/ulozto/cz/rate-limiting?platform=web&id=fed26c4ecb9fb4d5d3ef94205628b675147b6730
104.26.0.214302 Found 0 B URL HTTP/1.1 entry.gozofinder.com/redirect/v2/rwEZFmA0px11G2IeXl9znJkyY1DkBQIhIUA2pmAPGF9xnJHgnTy0YJqcM2ShqTIhYGVjZGRgLzImqP1iMv04ZUZgpzSlVlSnE1V1DxqFZycgETkOHHI4GHcJZycUFTkPE3OfDHtkHSbmDHqUFKyVFxy5I3OEI3qOnw09YGALEGqunSui?language=cs&service=ulozto&userSessionId=9600c322-9493-435c-9bb2-b7a0b7fd08f8&platform=web&errorUrl=https://gozofinder.com/cse/ulozto/cz/file-not-found?platform=web&rateLimitingUrl=https://gozofinder.com/cse/ulozto/cz/rate-limiting?platform=web&id=fed26c4ecb9fb4d5d3ef94205628b675147b6730
IP 104.26.0.214:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect/v2/rwEZFmA0px11G2IeXl9znJkyY1DkBQIhIUA2pmAPGF9xnJHgnTy0YJqcM2ShqTIhYGVjZGRgLzImqP1iMv04ZUZgpzSlVlSnE1V1DxqFZycgETkOHHI4GHcJZycUFTkPE3OfDHtkHSbmDHqUFKyVFxy5I3OEI3qOnw09YGALEGqunSui?language=cs&service=ulozto&userSessionId=9600c322-9493-435c-9bb2-b7a0b7fd08f8&platform=web&errorUrl=https://gozofinder.com/cse/ulozto/cz/file-not-found?platform=web&rateLimitingUrl=https://gozofinder.com/cse/ulozto/cz/rate-limiting?platform=web&id=fed26c4ecb9fb4d5d3ef94205628b675147b6730 HTTP/1.1
Host: entry.gozofinder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Tue, 31 Jan 2023 11:03:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
x-request-id: 831795b8-233b-4101-9765-bbfda60b91f4
x-app-name: gozo-api-app
location: https://uloz.to/file/T185nTsvs3BM/die-hit-giganten-2011-best-of-80s-rar#!ZGR5BGR2ZmDlAQExMJV2ZGHlBGplAH1PZ3AGGIyHJIyWpQWwAj==
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FYZQysh1P94cmZdJN3adm5kr5GMMak48UaXnVP4Acn0k1f7q7u5SX1cCqbta0%2BVdsS7f3boT%2FJaKYLCiDENqxjfyQV0j9i6mZsS1p9eq9jovFs%2BzgrXpkTpppygTEz2VfDrsgD5e"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7921f65d8d6e1c06-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5eb7c9bc996a0ff420e58af45526f053
8c2614832b8efe1c9da0bbd465d6f3f172d95a9e
c085cf277dd0429fe15e4a4bce5595636e9f2204d5a8e77220f8bf88adf4068f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15188
Expires: Tue, 31 Jan 2023 15:16:51 GMT
Date: Tue, 31 Jan 2023 11:03:43 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 0c35c3ec659d3a26ea97e68d787bb043
d97e3672244efec5b7814f2d8a734cd1a9387854
4c946a026114ff05316d92277750facf3d5f5d162839149da0b7fb1a4cff6b5e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C946A026114FF05316D92277750FACF3D5F5D162839149DA0B7FB1A4CFF6B5E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16738
Expires: Tue, 31 Jan 2023 15:42:41 GMT
Date: Tue, 31 Jan 2023 11:03:43 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 31 Jan 2023 10:35:52 GMT
content-type: application/json
age: 1671
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash a8d45deaa7ebfcd996c2055dae592ab8
55befe074589fe7b39757c145968058162a8fc6b
50d7d516f446458145a304b288a0a39d391cd37ea50dabea36ae48d291c65ba7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50D7D516F446458145A304B288A0A39D391CD37EA50DABEA36AE48D291C65BA7"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9746
Expires: Tue, 31 Jan 2023 13:46:09 GMT
Date: Tue, 31 Jan 2023 11:03:43 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: GsyEYX1PgWYRAfGbxZJUQrkk6ZvchnIc2OekWWOXimzPERzhtAWTX5dUz0lOBlh9UUGklM5ud3I=
x-amz-request-id: RSTN48RH8GA8ZCYB
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 31 Jan 2023 10:22:11 GMT
age: 2492
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:43 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash bf920ddeab460d52274e2e97cd507cdf
6bb7737e06eca11de7d01f854bc526d36f917ee1
b755de9d40b2eb1860cd3ab29135e299f01ac22600987e72691ad89f433810e3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B755DE9D40B2EB1860CD3AB29135E299F01AC22600987E72691AD89F433810E3"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=339
Expires: Tue, 31 Jan 2023 11:09:22 GMT
Date: Tue, 31 Jan 2023 11:03:43 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 31 Jan 2023 10:49:04 GMT
age: 879
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15390
Expires: Tue, 31 Jan 2023 15:20:13 GMT
Date: Tue, 31 Jan 2023 11:03:43 GMT
Connection: keep-alive
status.thawte.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d70ab07ee31957975a9b93cd47952127
590f8e99995f1bd94c6d67252cb3c78645570930
d7171a270530d34c53f61dd775563bbd2ca0f90309852316c77a7ea0c1086b69
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3751
Cache-Control: max-age=106891
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:03:44 GMT
Etag: "63d7e574-1d7"
Expires: Wed, 01 Feb 2023 16:45:15 GMT
Last-Modified: Mon, 30 Jan 2023 15:42:44 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
static.uloz.to/common/fonts/FontIcon.woff2?v=3.300.358
93.99.2.84200 OK 23 kB URL HTTP/2 static.uloz.to/common/fonts/FontIcon.woff2?v=3.300.358
IP 93.99.2.84:0
ASN #16019 Vodafone Czech Republic a.s.
File type Web Open Font Format (Version 2), TrueType, length 23404, version 1.0\012- data
Hash 4ba8609fa4f7feb3693fe06c9571a132
64713e55b98c0b52dc7071f41dad1f7b26c96bca
782ae273d94c1e72e915cea3e5cea4bbf588bbb0ac295ab63e5f415f58aba8ef
GET /common/fonts/FontIcon.woff2?v=3.300.358 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://uloz.to
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:43 GMT
content-type: application/octet-stream
content-length: 23404
last-modified: Tue, 17 Jan 2023 08:57:04 GMT
etag: "63c662e0-5b6c"
expires: Tue, 31 Jan 2023 23:03:43 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
go.eu.bbelements.com/please/code?j-17114.2.1.4.0.0._blank
62.168.44.115200 OK 2.3 kB URL HTTP/1.1 go.eu.bbelements.com/please/code?j-17114.2.1.4.0.0._blank
IP 62.168.44.115:0
ASN #13036 T-Mobile Czech Republic a.s.
File type ASCII text, with very long lines (3393), with CRLF, LF line terminators
Hash ad42a619f3c0cfda9a6a0d3b4131ce5f
c03ba9c88fef46c3a3a466e441fc9bf2db4cd0af
d9e9e8ae8f23568eb00fdf22a4bd2609169f2a3db874b984e69ec07686c2f7e6
GET /please/code?j-17114.2.1.4.0.0._blank HTTP/1.1
Host: go.eu.bbelements.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 31 Jan 2023 11:03:44 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: close
Expires: Tue, 31 Jan 2023 13:03:44 GMT
P3P: CP="CUR ADM DEV OUR STP PRE DSP NOI COR NID"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
push.services.mozilla.com/
54.187.189.114101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.187.189.114:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: U028W2NfOwcjSENO/6p7yQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Ds090NihQWETcoS18sxiTzB8ElU=
static.uloz.to/common/fonts/OpenSans-Regular.woff2?v=3.300.358
93.99.2.84200 OK 16 kB URL HTTP/2 static.uloz.to/common/fonts/OpenSans-Regular.woff2?v=3.300.358
IP 93.99.2.84:0
ASN #16019 Vodafone Czech Republic a.s.
File type Web Open Font Format (Version 2), TrueType, length 15572, version 1.6554\012- data
Hash e64cab167bbdc04807429d10873901a0
afc44700053c9a28f9ab26f6aec4862ac1d0795d
60f9b5203842a4fe2d52f7c96f3c57b755bbf8f347535469739bcc6f95a9c4b5
GET /common/fonts/OpenSans-Regular.woff2?v=3.300.358 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://uloz.to
Connection: keep-alive
Referer: https://static.uloz.to/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:44 GMT
content-type: application/octet-stream
content-length: 15572
last-modified: Mon, 02 Jan 2023 09:20:45 GMT
etag: "63b2a1ed-3cd4"
expires: Tue, 31 Jan 2023 23:03:44 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
static.uloz.to/common/images/ico/vector/flag-cz.svg?v=3.300.358
93.99.2.84200 OK 429 B URL HTTP/2 static.uloz.to/common/images/ico/vector/flag-cz.svg?v=3.300.358
IP 93.99.2.84:0
ASN #16019 Vodafone Czech Republic a.s.
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text
Hash 8775d9badb2d21340089e4ae587121a8
77d84296cfb1374da51d5b6278255cee292eef4c
7a7225b2ed6ab2357cd3d3c24e485769020ebbe9c4d45cb55200d6e56332b5e6
GET /common/images/ico/vector/flag-cz.svg?v=3.300.358 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.uloz.to/ul3/css/style-global.css?v=3.300.358
Cookie: ULOSESSID=lrv6h1ad7hj8vle61hg3mk759q; uloztoid=2067298116
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:44 GMT
content-type: image/svg+xml
content-length: 429
last-modified: Mon, 02 Jan 2023 09:20:45 GMT
etag: "63b2a1ed-1ad"
expires: Tue, 31 Jan 2023 23:03:44 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash d81f874741beb45c89de8bb5c6de438e
a251ab903e654953631d84721479bbae55aa5cdf
ec28dafa2a54818028d4dfe99218d9e4b507f3bd7efaabfba630d85f24d4d75d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:03:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
status.thawte.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash c80b9dd7a9d9741f4f9d05d99ea8fbd9
473c0c6035a5091e7e670b84d0a27e62160ae42d
8ae03759b3e2fbb791a449db9a4c3e3a7b62cc2da2854a197657aa31ee36d538
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6512
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:03:44 GMT
Last-Modified: Tue, 31 Jan 2023 09:15:12 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
static.uloz.to/common/fonts/OpenSans-SemiBold.woff2?v=3.300.358
93.99.2.84200 OK 16 kB URL HTTP/2 static.uloz.to/common/fonts/OpenSans-SemiBold.woff2?v=3.300.358
IP 93.99.2.84:0
ASN #16019 Vodafone Czech Republic a.s.
File type Web Open Font Format (Version 2), TrueType, length 16164, version 1.6554\012- data
Hash fa907b3395c41e35cdb25dca66a58ca9
a0b0c389cf46d63c850e61fed572485ff0b68183
efc029e0546f49ed87c043e09393a995468c2ab1a139332b3aca0fdbe93fe51e
GET /common/fonts/OpenSans-SemiBold.woff2?v=3.300.358 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://uloz.to
Connection: keep-alive
Referer: https://static.uloz.to/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:44 GMT
content-type: application/octet-stream
content-length: 16164
last-modified: Mon, 02 Jan 2023 09:20:45 GMT
etag: "63b2a1ed-3f24"
expires: Tue, 31 Jan 2023 23:03:44 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
static.uloz.to/common/images/ico/vector/file-archive.svg
93.99.2.84200 OK 1.8 kB URL HTTP/2 static.uloz.to/common/images/ico/vector/file-archive.svg
IP 93.99.2.84:0
ASN #16019 Vodafone Czech Republic a.s.
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (673)
Hash 7ae3c28f716d3fd8035298f1823f4002
4aeed910a4aeeca5b18a82bdeaaf29a980957931
3365e38f375c609d643aae84d2e2d62c45af2184022e2f358d8a54d61f0441e0
GET /common/images/ico/vector/file-archive.svg HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Cookie: ULOSESSID=lrv6h1ad7hj8vle61hg3mk759q; uloztoid=2067298116
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:44 GMT
content-type: image/svg+xml
content-length: 1769
last-modified: Mon, 02 Jan 2023 09:20:45 GMT
etag: "63b2a1ed-6e9"
expires: Tue, 31 Jan 2023 23:03:44 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
static.uloz.to/common/fonts/OpenSans-Regular-Ext.woff2?v=3.300.358
93.99.2.84200 OK 12 kB URL HTTP/2 static.uloz.to/common/fonts/OpenSans-Regular-Ext.woff2?v=3.300.358
IP 93.99.2.84:0
ASN #16019 Vodafone Czech Republic a.s.
File type Web Open Font Format (Version 2), TrueType, length 12288, version 1.6554\012- data
Hash 921dd520c3fba714997c8b941d51dbc5
113978181dcac77baecef6115a9121d8f6e4fc3a
a846f7af6f32f2be5cb922158882116af42816a0ff71506920e18a3ba89456b9
GET /common/fonts/OpenSans-Regular-Ext.woff2?v=3.300.358 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://uloz.to
Connection: keep-alive
Referer: https://static.uloz.to/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:44 GMT
content-type: application/octet-stream
content-length: 12288
last-modified: Mon, 02 Jan 2023 09:20:45 GMT
etag: "63b2a1ed-3000"
expires: Tue, 31 Jan 2023 23:03:44 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-T8FDDK
142.250.74.168200 OK 59 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-T8FDDK
IP 142.250.74.168:0
File type Unicode text, UTF-8 text, with very long lines (33254)
Hash 3da84089438cd3104040a76caf1daf4b
cd44335c07e2b88d2920ec6c07c405c48a245923
6cf376e95f9bfcd4a7571d4f6b5d49465274abddce187e1c9253101f1c9cd024
GET /gtm.js?id=GTM-T8FDDK HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 31 Jan 2023 11:03:44 GMT
expires: Tue, 31 Jan 2023 11:03:44 GMT
cache-control: private, max-age=900
last-modified: Tue, 31 Jan 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 59101
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash d81f874741beb45c89de8bb5c6de438e
a251ab903e654953631d84721479bbae55aa5cdf
ec28dafa2a54818028d4dfe99218d9e4b507f3bd7efaabfba630d85f24d4d75d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:03:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
go.eu.bbelements.com/please/showit/17114/2/1/4/?typkodu=js&ubl=en-US&ucd=24&uce=1&uje=0&uah=1002&uaw=1280&uhe=1024&uwi=1280&uto=0&uti=1675163040656&keywords=&href=https%3A//uloz.to/file/T185nTsvs3BM/die-hit-giganten-2011-best-of-80s-rar%23%21ZGR5BGR2ZmDlAQExMJV2ZGHlBGplAH1PZ3AGGIyHJIyWpQWwAj%3D%3D&bust=0.42370683304697565&target=_blank
62.168.44.115200 OK 2.0 kB URL HTTP/1.1 go.eu.bbelements.com/please/showit/17114/2/1/4/?typkodu=js&ubl=en-US&ucd=24&uce=1&uje=0&uah=1002&uaw=1280&uhe=1024&uwi=1280&uto=0&uti=1675163040656&keywords=&href=https%3A//uloz.to/file/T185nTsvs3BM/die-hit-giganten-2011-best-of-80s-rar%23%21ZGR5BGR2ZmDlAQExMJV2ZGHlBGplAH1PZ3AGGIyHJIyWpQWwAj%3D%3D&bust=0.42370683304697565&target=_blank
IP 62.168.44.115:0
ASN #13036 T-Mobile Czech Republic a.s.
File type ASCII text, with very long lines (3393), with CRLF, LF line terminators
Hash b099c0044885f17cee574b6c7d285b3a
b419aa1e2d7e94dfd8bbd90b36b4c5fe3f73e2d6
6c2dfc3f96477c1583121bf3ab8f8131a164fc47a3365d32bc129515febd12fe
GET /please/showit/17114/2/1/4/?typkodu=js&ubl=en-US&ucd=24&uce=1&uje=0&uah=1002&uaw=1280&uhe=1024&uwi=1280&uto=0&uti=1675163040656&keywords=&href=https%3A//uloz.to/file/T185nTsvs3BM/die-hit-giganten-2011-best-of-80s-rar%23%21ZGR5BGR2ZmDlAQExMJV2ZGHlBGplAH1PZ3AGGIyHJIyWpQWwAj%3D%3D&bust=0.42370683304697565&target=_blank HTTP/1.1
Host: go.eu.bbelements.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 31 Jan 2023 11:03:44 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: close
expires: -1
cache-control: no-cache
set-cookie: bm2uu=0_0_1675163024_18_0_0_(null)~*; Path=/please/; Domain=go.eu.bbelements.com; SameSite=None; Max-Age=7776000; Secure
p3p: CP="CUR ADM DEV OUR STP PRE DSP NOI COR NID"
Content-Encoding: gzip
go.eu.bbelements.com/please/track/beacon/?b=1293245732&dstats=17114|2|1|4|0|251186|1029725|2023-01-31|12:03:44|1063823|1|0|11|44|18|0|1|0|91.90.42.154|1280|1024|0|0|1532635802||||0|0&bsh=126676600&bts=1675163024
62.168.44.115200 OK 43 B URL HTTP/1.1 go.eu.bbelements.com/please/track/beacon/?b=1293245732&dstats=17114|2|1|4|0|251186|1029725|2023-01-31|12:03:44|1063823|1|0|11|44|18|0|1|0|91.90.42.154|1280|1024|0|0|1532635802||||0|0&bsh=126676600&bts=1675163024
IP 62.168.44.115:0
ASN #13036 T-Mobile Czech Republic a.s.
File type GIF image data, version 89a, 1 x 1\012- data
Hash c59e2d767fb8529daa1ee1e02373ed75
26b7e27c07998f9f659165978bb2cb58290f9c92
0b048e6b9ac38a829a061196d2d9e688d69d1e4b2b10f81c442fefc97c36bde9
GET /please/track/beacon/?b=1293245732&dstats=17114|2|1|4|0|251186|1029725|2023-01-31|12:03:44|1063823|1|0|11|44|18|0|1|0|91.90.42.154|1280|1024|0|0|1532635802||||0|0&bsh=126676600&bts=1675163024 HTTP/1.1
Host: go.eu.bbelements.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Cookie: bm2uu=0_0_1675163024_18_0_0_(null)~*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 31 Jan 2023 11:03:44 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: close
Expires: -1
Cache-Control: no-cache
bbcdn-bbnaut.ibillboard.com/library/bbnaut-lib-latest.min.js
62.168.44.119200 OK 7.2 kB URL HTTP/2 bbcdn-bbnaut.ibillboard.com/library/bbnaut-lib-latest.min.js
IP 62.168.44.119:0
ASN #13036 T-Mobile Czech Republic a.s.
File type ASCII text, with very long lines (14064), with CRLF, LF line terminators
Hash 8593a7724b594bdecdfb8c8300fb848d
b89b527ae8198f158d9f6ef70ca479a4ce6aaf26
78444d09ab9633faa0c920156e72b8cac8b914f87df1df2588dee578e8005085
GET /library/bbnaut-lib-latest.min.js HTTP/1.1
Host: bbcdn-bbnaut.ibillboard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:44 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 20 Oct 2022 12:13:29 GMT
etag: W/"63513b69-32b2"
expires: Tue, 07 Feb 2023 00:01:27 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
thumbs.uloz.to/4/e/W/x4eWrbbP.640x360.0.jpg?vt=1675292399&sg=Gr807zMmim2BcVa0egv7fg&bl=
93.99.2.88200 OK 75 kB URL HTTP/2 thumbs.uloz.to/4/e/W/x4eWrbbP.640x360.0.jpg?vt=1675292399&sg=Gr807zMmim2BcVa0egv7fg&bl=
IP 93.99.2.88:0
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 436x360, components 3\012- data
Hash 2ab7d733a23b03c6bde891ac4e4b10bf
ae68641705bf7a3e947c6d694bc48fef30a78b0e
a8ca95842d7216cd5557ac19ab3f93b74d13179a4a5be8f1354d06af394f49b8
GET /4/e/W/x4eWrbbP.640x360.0.jpg?vt=1675292399&sg=Gr807zMmim2BcVa0egv7fg&bl= HTTP/1.1
Host: thumbs.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Cookie: ULOSESSID=lrv6h1ad7hj8vle61hg3mk759q; uloztoid=2067298116
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Tue, 31 Jan 2023 11:03:44 GMT
content-type: image/jpeg
content-length: 74829
last-modified: Sun, 23 Feb 2020 05:43:04 GMT
etag: "2ab7d733a23b03c6bde891ac4e4b10bf"
x-amz-request-id: tx0000000000000076ad1b9-0063d8f590-2e064284-default
expires: Thu, 02 Feb 2023 11:03:44 GMT
cache-control: max-age=172800
x-cache-status: MISS
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash cb5602fc6e47675f4981dccd26dda23f
d1184793bb8a7b987f22652ba69b5f4da70d60f8
8bd15ca82475d97a03cfe641a7ba01a751897ecf3ef7653acabb2d91d015edf5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1329
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:03:44 GMT
Last-Modified: Tue, 31 Jan 2023 10:41:35 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
go.eu.bbelements.com/please/track/beacon/?b=244978066&dstats=22668|1|1|15|0|188743|788134|2023-01-31|12:03:44|839756|1|0|11|44|18|0|0|0|91.90.42.154|1280|1024|1|0|1532635802||||0|0&bsh=2272634487&bts=1675163024
62.168.44.115200 OK 43 B URL HTTP/1.1 go.eu.bbelements.com/please/track/beacon/?b=244978066&dstats=22668|1|1|15|0|188743|788134|2023-01-31|12:03:44|839756|1|0|11|44|18|0|0|0|91.90.42.154|1280|1024|1|0|1532635802||||0|0&bsh=2272634487&bts=1675163024
IP 62.168.44.115:0
ASN #13036 T-Mobile Czech Republic a.s.
File type GIF image data, version 89a, 1 x 1\012- data
Hash c59e2d767fb8529daa1ee1e02373ed75
26b7e27c07998f9f659165978bb2cb58290f9c92
0b048e6b9ac38a829a061196d2d9e688d69d1e4b2b10f81c442fefc97c36bde9
GET /please/track/beacon/?b=244978066&dstats=22668|1|1|15|0|188743|788134|2023-01-31|12:03:44|839756|1|0|11|44|18|0|0|0|91.90.42.154|1280|1024|1|0|1532635802||||0|0&bsh=2272634487&bts=1675163024 HTTP/1.1
Host: go.eu.bbelements.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Cookie: bm2uu=0_0_1675163024_18_0_0_(null)~*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 31 Jan 2023 11:03:44 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: close
Expires: -1
Cache-Control: no-cache
track.adform.net/adfscript/?bn=12487188;click=https://go.eu.bbelements.com/please/redirect/22668/1/1/15/!uwi=1280,uhe=1024,uce=1,ibbid=,impressionId=ccefa97f-30f9-420b-829e-69c34a68d826,ibb_device_id=0,ip_co=18,ip_reg=0,b_w=300,b_h=600,tcf2=15,param=839756/788134_1_?https%3A%2F%2Fgo.eu.bbelements.com%2Fplease%2Fredirect%2F17114%2F2%2F1%2F4%2F!uwi%3D1280%2Cuhe%3D1024%2Cuce%3D0%2Cibbid%3D%2CimpressionId%3De0bd3385-ca5e-4456-a1f2-850caeb9f3ed%2Cibb_device_id%3D0%2Cip_co%3D18%2Cip_reg%3D0%2Cb_w%3D300%2Cb_h%3D300%2Ctcf2%3D15%2Cparam%3D1063823%2F1029725_1_%3Fhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D12487188%253BC%253D0
37.157.5.142200 OK 879 B URL HTTP/2 track.adform.net/adfscript/?bn=12487188;click=https://go.eu.bbelements.com/please/redirect/22668/1/1/15/!uwi=1280,uhe=1024,uce=1,ibbid=,impressionId=ccefa97f-30f9-420b-829e-69c34a68d826,ibb_device_id=0,ip_co=18,ip_reg=0,b_w=300,b_h=600,tcf2=15,param=839756/788134_1_?https%3A%2F%2Fgo.eu.bbelements.com%2Fplease%2Fredirect%2F17114%2F2%2F1%2F4%2F!uwi%3D1280%2Cuhe%3D1024%2Cuce%3D0%2Cibbid%3D%2CimpressionId%3De0bd3385-ca5e-4456-a1f2-850caeb9f3ed%2Cibb_device_id%3D0%2Cip_co%3D18%2Cip_reg%3D0%2Cb_w%3D300%2Cb_h%3D300%2Ctcf2%3D15%2Cparam%3D1063823%2F1029725_1_%3Fhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D12487188%253BC%253D0
IP 37.157.5.142:0
File type ASCII text, with very long lines (753), with CRLF line terminators
Hash 129f24eedd5b8b1c9b9dcc2dd3e43232
5ce802252b81e21d5b7f7160150b33dde5732859
88c1ab0ec41e6605f69b01481048923a7326bed4a0200b6add34b5fdbb4fecda
GET /adfscript/?bn=12487188;click=https://go.eu.bbelements.com/please/redirect/22668/1/1/15/!uwi=1280,uhe=1024,uce=1,ibbid=,impressionId=ccefa97f-30f9-420b-829e-69c34a68d826,ibb_device_id=0,ip_co=18,ip_reg=0,b_w=300,b_h=600,tcf2=15,param=839756/788134_1_?https%3A%2F%2Fgo.eu.bbelements.com%2Fplease%2Fredirect%2F17114%2F2%2F1%2F4%2F!uwi%3D1280%2Cuhe%3D1024%2Cuce%3D0%2Cibbid%3D%2CimpressionId%3De0bd3385-ca5e-4456-a1f2-850caeb9f3ed%2Cibb_device_id%3D0%2Cip_co%3D18%2Cip_reg%3D0%2Cb_w%3D300%2Cb_h%3D300%2Ctcf2%3D15%2Cparam%3D1063823%2F1029725_1_%3Fhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D12487188%253BC%253D0 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:44 GMT
content-type: text/javascript; charset=utf-8
content-length: 879
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: *
set-cookie: C=1; domain=adform.net; expires=Tue, 28-Feb-2023 11:03:44 GMT; path=/
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
thumbs.uloz.to/4/e/W/x4eWrbbP.640x360.1.jpg?vt=1675292399&sg=ompabzEOU2G16jnecwFOlQ&bl=
93.99.2.88200 OK 49 kB URL HTTP/2 thumbs.uloz.to/4/e/W/x4eWrbbP.640x360.1.jpg?vt=1675292399&sg=ompabzEOU2G16jnecwFOlQ&bl=
IP 93.99.2.88:0
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x360, components 3\012- data
Hash 5e7d47827cf2d64b9442b2341bcbf89d
2e0bf0c54af1509f687af0df09b59bf3aebc39f2
2546460096786aeef72f727a87bed0584b286535ab08c4469302305f33b8bd13
GET /4/e/W/x4eWrbbP.640x360.1.jpg?vt=1675292399&sg=ompabzEOU2G16jnecwFOlQ&bl= HTTP/1.1
Host: thumbs.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Cookie: ULOSESSID=lrv6h1ad7hj8vle61hg3mk759q; uloztoid=2067298116; _ga_L4S9E2Y7WN=GS1.1.1675163041.1.0.1675163041.0.0.0; _ga=GA1.1.1031170634.1675163041
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Tue, 31 Jan 2023 11:03:44 GMT
content-type: image/jpeg
content-length: 49073
last-modified: Sun, 23 Feb 2020 05:43:04 GMT
etag: "5e7d47827cf2d64b9442b2341bcbf89d"
x-amz-request-id: tx000000000000007439007-0063d8f590-2e073d04-default
expires: Thu, 02 Feb 2023 11:03:44 GMT
cache-control: max-age=172800
x-cache-status: MISS
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
static.uloz.to/javascript/bundle/sentryBrowser.js?v=3.300.358
93.99.2.84200 OK 141 kB URL HTTP/2 static.uloz.to/javascript/bundle/sentryBrowser.js?v=3.300.358
IP 93.99.2.84:0
ASN #16019 Vodafone Czech Republic a.s.
Size 141 kB (141276 bytes)
Hash 200ca9c35d64b5139c0cbc00800833ff
61e258954961486c3a4cdfcd41609511ea9c58fe
89f2c4b631f96626a5b2a85d8fed11bdd33d7583dab43f7d805bbf9d3d33a2d8
GET /javascript/bundle/sentryBrowser.js?v=3.300.358 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Cookie: ULOSESSID=lrv6h1ad7hj8vle61hg3mk759q; uloztoid=2067298116
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:44 GMT
content-type: application/x-javascript
last-modified: Tue, 17 Jan 2023 08:55:39 GMT
etag: W/"63c6628b-45548"
expires: Tue, 31 Jan 2023 23:03:44 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
track.adform.net/adfserve/?CC=1&bn=12487188;click=https://go.eu.bbelements.com/please/redirect/22668/1/1/15/!uwi=1280,uhe=1024,uce=1,ibbid=,impressionId=ccefa97f-30f9-420b-829e-69c34a68d826,ibb_device_id=0,ip_co=18,ip_reg=0,b_w=300,b_h=600,tcf2=15,param=839756/788134_1_?https%3A%2F%2Fgo.eu.bbelements.com%2Fplease%2Fredirect%2F17114%2F2%2F1%2F4%2F!uwi%3D1280%2Cuhe%3D1024%2Cuce%3D0%2Cibbid%3D%2CimpressionId%3De0bd3385-ca5e-4456-a1f2-850caeb9f3ed%2Cibb_device_id%3D0%2Cip_co%3D18%2Cip_reg%3D0%2Cb_w%3D300%2Cb_h%3D300%2Ctcf2%3D15%2Cparam%3D1063823%2F1029725_1_%3Fhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D12487188%253BC%253D0;js=1;adfxid=1x;6502;set=en-US|en-US|1280X1024|0|1300|950|24|8|3|7|0|0;cmpgdpr=;cmpgdprconsent=;fd=0|2&CREFURL=https%3A%2F%2Fuloz.to%2Ffile%2FT185nTsvs3BM%2Fdie-hit-giganten-2011-best-of-80s-rar
37.157.5.142200 OK 2.4 kB URL HTTP/2 track.adform.net/adfserve/?CC=1&bn=12487188;click=https://go.eu.bbelements.com/please/redirect/22668/1/1/15/!uwi=1280,uhe=1024,uce=1,ibbid=,impressionId=ccefa97f-30f9-420b-829e-69c34a68d826,ibb_device_id=0,ip_co=18,ip_reg=0,b_w=300,b_h=600,tcf2=15,param=839756/788134_1_?https%3A%2F%2Fgo.eu.bbelements.com%2Fplease%2Fredirect%2F17114%2F2%2F1%2F4%2F!uwi%3D1280%2Cuhe%3D1024%2Cuce%3D0%2Cibbid%3D%2CimpressionId%3De0bd3385-ca5e-4456-a1f2-850caeb9f3ed%2Cibb_device_id%3D0%2Cip_co%3D18%2Cip_reg%3D0%2Cb_w%3D300%2Cb_h%3D300%2Ctcf2%3D15%2Cparam%3D1063823%2F1029725_1_%3Fhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D12487188%253BC%253D0;js=1;adfxid=1x;6502;set=en-US|en-US|1280X1024|0|1300|950|24|8|3|7|0|0;cmpgdpr=;cmpgdprconsent=;fd=0|2&CREFURL=https%3A%2F%2Fuloz.to%2Ffile%2FT185nTsvs3BM%2Fdie-hit-giganten-2011-best-of-80s-rar
IP 37.157.5.142:0
File type ASCII text, with very long lines (3347), with CRLF line terminators
Hash 5d0007e175edc658fbda7b6578743af3
a6b3b32f1a375ede51f1c486439e8623c357c4ea
11c26cf0b40303fe086118c799f1f8d0aafc0202699898a01fd09504c769ede3
GET /adfserve/?CC=1&bn=12487188;click=https://go.eu.bbelements.com/please/redirect/22668/1/1/15/!uwi=1280,uhe=1024,uce=1,ibbid=,impressionId=ccefa97f-30f9-420b-829e-69c34a68d826,ibb_device_id=0,ip_co=18,ip_reg=0,b_w=300,b_h=600,tcf2=15,param=839756/788134_1_?https%3A%2F%2Fgo.eu.bbelements.com%2Fplease%2Fredirect%2F17114%2F2%2F1%2F4%2F!uwi%3D1280%2Cuhe%3D1024%2Cuce%3D0%2Cibbid%3D%2CimpressionId%3De0bd3385-ca5e-4456-a1f2-850caeb9f3ed%2Cibb_device_id%3D0%2Cip_co%3D18%2Cip_reg%3D0%2Cb_w%3D300%2Cb_h%3D300%2Ctcf2%3D15%2Cparam%3D1063823%2F1029725_1_%3Fhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D12487188%253BC%253D0;js=1;adfxid=1x;6502;set=en-US|en-US|1280X1024|0|1300|950|24|8|3|7|0|0;cmpgdpr=;cmpgdprconsent=;fd=0|2&CREFURL=https%3A%2F%2Fuloz.to%2Ffile%2FT185nTsvs3BM%2Fdie-hit-giganten-2011-best-of-80s-rar HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:45 GMT
content-type: text/javascript; charset=utf-8
content-length: 2386
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
pw.uloz.to/pw.php?action_name=Die%20Hit-Giganten%20-%202011%20-%20Best%20Of%2080s.rar%20%7C%20Ulo%C5%BE.to&idsite=1&rec=1&r=097755&h=11&m=4&s=1&url=https%3A%2F%2Fuloz.to%2Ffile%2FT185nTsvs3BM%2Fdie-hit-giganten-2011-best-of-80s-rar%23!ZGR5BGR2ZmDlAQExMJV2ZGHlBGplAH1PZ3AGGIyHJIyWpQWwAj%3D%3D&_id=873fce5c2da73b8a&_idn=1&send_image=0&_refts=0&cookie=1&res=1280x1024&pv_id=p2B45K&pf_net=192&pf_srv=255&pf_tfr=0
93.99.2.99204 No Response 0 B URL HTTP/1.1 pw.uloz.to/pw.php?action_name=Die%20Hit-Giganten%20-%202011%20-%20Best%20Of%2080s.rar%20%7C%20Ulo%C5%BE.to&idsite=1&rec=1&r=097755&h=11&m=4&s=1&url=https%3A%2F%2Fuloz.to%2Ffile%2FT185nTsvs3BM%2Fdie-hit-giganten-2011-best-of-80s-rar%23!ZGR5BGR2ZmDlAQExMJV2ZGHlBGplAH1PZ3AGGIyHJIyWpQWwAj%3D%3D&_id=873fce5c2da73b8a&_idn=1&send_image=0&_refts=0&cookie=1&res=1280x1024&pv_id=p2B45K&pf_net=192&pf_srv=255&pf_tfr=0
IP 93.99.2.99:0
ASN #16019 Vodafone Czech Republic a.s.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pw.php?action_name=Die%20Hit-Giganten%20-%202011%20-%20Best%20Of%2080s.rar%20%7C%20Ulo%C5%BE.to&idsite=1&rec=1&r=097755&h=11&m=4&s=1&url=https%3A%2F%2Fuloz.to%2Ffile%2FT185nTsvs3BM%2Fdie-hit-giganten-2011-best-of-80s-rar%23!ZGR5BGR2ZmDlAQExMJV2ZGHlBGplAH1PZ3AGGIyHJIyWpQWwAj%3D%3D&_id=873fce5c2da73b8a&_idn=1&send_image=0&_refts=0&cookie=1&res=1280x1024&pv_id=p2B45K&pf_net=192&pf_srv=255&pf_tfr=0 HTTP/1.1
Host: pw.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 0
Origin: https://uloz.to
Connection: keep-alive
Referer: https://uloz.to/
Cookie: ULOSESSID=lrv6h1ad7hj8vle61hg3mk759q; uloztoid=2067298116; _ga_L4S9E2Y7WN=GS1.1.1675163041.1.0.1675163041.0.0.0; _ga=GA1.1.1031170634.1675163041
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 204 No Response
Server: nginx
Date: Tue, 31 Jan 2023 11:03:45 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Access-Control-Allow-Origin: https://uloz.to
Access-Control-Allow-Credentials: true
uloz.to/apple-touch-icon.png?v=3.300.358
93.99.2.80200 OK 2.2 kB URL HTTP/2 uloz.to/apple-touch-icon.png?v=3.300.358
IP 93.99.2.80:0
ASN #16019 Vodafone Czech Republic a.s.
File type PNG image data, 180 x 180, 8-bit colormap, non-interlaced\012- data
Hash 909af915e7f9336df712a44a0c59ee6b
38d5bda9468e726c5faef48200621bf756619365
8607bcd7c494d4f9f732a42e5622d1a556b8cb33212b24003a8b4a217cea7796
GET /apple-touch-icon.png?v=3.300.358 HTTP/1.1
Host: uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/file/T185nTsvs3BM/die-hit-giganten-2011-best-of-80s-rar
Cookie: _nss=1; ULOSESSID=lrv6h1ad7hj8vle61hg3mk759q; uloztoid=2067298116; skin-switcher-selection=light; abtest=0; _ga_L4S9E2Y7WN=GS1.1.1675163041.1.0.1675163041.0.0.0; _ga=GA1.1.1031170634.1675163041; _pk_id.1.6747=873fce5c2da73b8a.1675163041.; _pk_ses.1.6747=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:45 GMT
content-type: image/png
content-length: 2192
last-modified: Tue, 17 Jan 2023 08:53:09 GMT
etag: "63c661f5-890"
x-node-name: ulozto7
accept-ranges: bytes
X-Firefox-Spdy: h2
uloz.to/favicon-16x16.png?v=3.300.358
93.99.2.80200 OK 700 B URL HTTP/2 uloz.to/favicon-16x16.png?v=3.300.358
IP 93.99.2.80:0
ASN #16019 Vodafone Czech Republic a.s.
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 54f7cb33d42696940ddeb4b146bc1413
97769ee6364440d99348a9aab0b1c35299444a70
4e7fe0c610a778cdeba1a6a437036ef424764617822da190f72f01015ca64e2d
GET /favicon-16x16.png?v=3.300.358 HTTP/1.1
Host: uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/file/T185nTsvs3BM/die-hit-giganten-2011-best-of-80s-rar
Cookie: _nss=1; ULOSESSID=lrv6h1ad7hj8vle61hg3mk759q; uloztoid=2067298116; skin-switcher-selection=light; abtest=0; _ga_L4S9E2Y7WN=GS1.1.1675163041.1.0.1675163041.0.0.0; _ga=GA1.1.1031170634.1675163041; _pk_id.1.6747=873fce5c2da73b8a.1675163041.; _pk_ses.1.6747=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:45 GMT
content-type: image/png
content-length: 700
last-modified: Tue, 17 Jan 2023 08:53:09 GMT
etag: "63c661f5-2bc"
x-node-name: ulozto8
accept-ranges: bytes
X-Firefox-Spdy: h2
s1.adform.net/stoat/626/s1.adform.net/bootstrap.js
37.157.2.248200 OK 36 kB URL HTTP/2 s1.adform.net/stoat/626/s1.adform.net/bootstrap.js
IP 37.157.2.248:0
File type ASCII text, with very long lines (1490)
Hash caabdd6a3f72ebfed6b2b6fa44b3ad71
318482aaa8997f2ace20c8f692417ea3157ce7e3
e5d18796a0094cf03dd86aef09ca727ded463ec51dbc98220470cb459bcdfc47
GET /stoat/626/s1.adform.net/bootstrap.js HTTP/1.1
Host: s1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:44 GMT
content-type: text/javascript
vary: Accept-Encoding
access-control-allow-origin: *
last-modified: Wed, 21 Dec 2022 11:59:41 GMT
cache-control: public, max-age=100000
expires: Wed, 01 Feb 2023 14:46:09 GMT
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
static.uloz.to/common/fonts/OpenSans-SemiBold-Ext.woff2?v=3.300.358
93.99.2.84200 OK 13 kB URL HTTP/2 static.uloz.to/common/fonts/OpenSans-SemiBold-Ext.woff2?v=3.300.358
IP 93.99.2.84:0
ASN #16019 Vodafone Czech Republic a.s.
File type Web Open Font Format (Version 2), TrueType, length 12692, version 1.6554\012- data
Hash f1517b1978d9eade19e14b6af80399d9
63eb74ef040aade256f2274a7f31a914edddb0ea
91b334ca58a5a56e8e95cd68e768d400a39f51ec33465a9dc6d2257547ff37bf
GET /common/fonts/OpenSans-SemiBold-Ext.woff2?v=3.300.358 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://uloz.to
Connection: keep-alive
Referer: https://static.uloz.to/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:45 GMT
content-type: application/octet-stream
content-length: 12692
last-modified: Mon, 02 Jan 2023 09:20:45 GMT
etag: "63b2a1ed-3194"
expires: Tue, 31 Jan 2023 23:03:45 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-L4S9E2Y7WN>m=2oe1p0&_p=2002469217&cid=1031170634.1675163041&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675163041&sct=1&seg=0&dl=https%3A%2F%2Fuloz.to%2Ffile%2FT185nTsvs3BM%2Fdie-hit-giganten-2011-best-of-80s-rar&dt=Die%20Hit-Giganten%20-%202011%20-%20Best%20Of%2080s.rar%20%7C%20Ulo%C5%BE.to&en=page_view&_fv=1&_nsi=1&_ss=1
216.239.34.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-L4S9E2Y7WN>m=2oe1p0&_p=2002469217&cid=1031170634.1675163041&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675163041&sct=1&seg=0&dl=https%3A%2F%2Fuloz.to%2Ffile%2FT185nTsvs3BM%2Fdie-hit-giganten-2011-best-of-80s-rar&dt=Die%20Hit-Giganten%20-%202011%20-%20Best%20Of%2080s.rar%20%7C%20Ulo%C5%BE.to&en=page_view&_fv=1&_nsi=1&_ss=1
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-L4S9E2Y7WN>m=2oe1p0&_p=2002469217&cid=1031170634.1675163041&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675163041&sct=1&seg=0&dl=https%3A%2F%2Fuloz.to%2Ffile%2FT185nTsvs3BM%2Fdie-hit-giganten-2011-best-of-80s-rar&dt=Die%20Hit-Giganten%20-%202011%20-%20Best%20Of%2080s.rar%20%7C%20Ulo%C5%BE.to&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://uloz.to
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://uloz.to
date: Tue, 31 Jan 2023 11:03:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 69ffc0a3f7ca2b025a6b99f9c38889be
1b436bda66cd246a1024f8c3d8e91e3aeef31eaa
9aaaf6c2a570c6a73a623f4fdfb0e1dfd5f16f086ae5d9c8d5b2403b0d016e4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:03:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash 1d427b8745a5c11a6ce04199cf9f7592
7e49b9b6a01bc394de513dba9aa6c3a84aef9ae7
c28d5f564a307501237677da2083ae02cb46f44d7add91eeda4cf2ea00cd79e5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=135129
Date: Tue, 31 Jan 2023 11:03:45 GMT
Etag: "63d84c0f-1d7"
Expires: Thu, 02 Feb 2023 00:35:54 GMT
Last-Modified: Mon, 30 Jan 2023 23:00:31 GMT
Server: ECS (bsa/EB1D)
X-Cache: Miss from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: wyJzWD9KF7f2tWNajeKOQlXf8PyeamkjcVk69pPDGLpxuAb0OZCr0A==
Age: 5723
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-205967-8&cid=1031170634.1675163041&jid=231979193&gjid=2056629775&_gid=1989338495.1675163042&_u=aCDAiAAjBAAAAE~&z=18066895
64.233.164.156200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-205967-8&cid=1031170634.1675163041&jid=231979193&gjid=2056629775&_gid=1989338495.1675163042&_u=aCDAiAAjBAAAAE~&z=18066895
IP 64.233.164.156:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-205967-8&cid=1031170634.1675163041&jid=231979193&gjid=2056629775&_gid=1989338495.1675163042&_u=aCDAiAAjBAAAAE~&z=18066895 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://uloz.to
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://uloz.to
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 31 Jan 2023 11:03:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03498770253468638
35.156.223.41302 Found 0 B URL HTTP/2 ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03498770253468638
IP 35.156.223.41:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adscale-ih/dum?tpid=101&sec=0&tpuid=03498770253468638 HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 31 Jan 2023 11:03:45 GMT
content-length: 0
location: https://ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03498770253468638&nut&uu=11f0796a73ff498eaa248c4c392b76d3
set-cookie: uu=11f0796a73ff498eaa248c4c392b76d3; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
cct=1675163025594; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
s1.adform.net/Banners/57186086/57186086.jpg?bv=2
37.157.2.248200 OK 54 kB URL HTTP/2 s1.adform.net/Banners/57186086/57186086.jpg?bv=2
IP 37.157.2.248:0
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x250, components 3\012- data
Hash 81bcc4477751ead20e7c10a1c94887fe
ca30151f4f8952b72d13cb78e4444c28d872803d
103e88eab4da0b5a8eeddbf905ea3e487e06fc336440a047c3530a02dca0d2b0
GET /Banners/57186086/57186086.jpg?bv=2 HTTP/1.1
Host: s1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:45 GMT
content-type: image/jpeg
content-length: 53723
last-modified: Fri, 27 Jan 2023 12:10:42 GMT
x-rgw-object-type: Normal
etag: "81bcc4477751ead20e7c10a1c94887fe"
x-amz-request-id: tx00000a00ffad071f9a17e-0063d3c004-3294894a-default
access-control-allow-origin: *
access-control-expose-headers: Content-Range,Content-Length
cache-control: public, max-age=604800
x-cache-status: STALE
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8671
Expires: Tue, 31 Jan 2023 13:28:16 GMT
Date: Tue, 31 Jan 2023 11:03:45 GMT
Connection: keep-alive
s1.adform.net/banners/scripts/assets/images/OBA/en.png
37.157.2.248200 OK 4.2 kB URL HTTP/2 s1.adform.net/banners/scripts/assets/images/OBA/en.png
IP 37.157.2.248:0
File type PNG image data, 72 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash 03731761a34663b5a065acaa2cf51394
a6209b366c173f25982eff74dacbe42a71fde8c9
835b8e7fce8c7030ab18fe28277589c21b062b5b6e6301939cb1e62b1af3f151
GET /banners/scripts/assets/images/OBA/en.png HTTP/1.1
Host: s1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:45 GMT
content-type: image/png
content-length: 4235
last-modified: Wed, 25 May 2022 11:48:05 GMT
x-rgw-object-type: Normal
etag: "03731761a34663b5a065acaa2cf51394"
x-amz-request-id: tx00000f0d43196b2ba222a-0063765db5-329373d4-default
access-control-allow-origin: *
cache-control: public, max-age=604800
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8671
Expires: Tue, 31 Jan 2023 13:28:16 GMT
Date: Tue, 31 Jan 2023 11:03:45 GMT
Connection: keep-alive
s1.adform.net/banners/scripts/assets/images/OBA/oba.png
37.157.2.248200 OK 3.3 kB URL HTTP/2 s1.adform.net/banners/scripts/assets/images/OBA/oba.png
IP 37.157.2.248:0
File type PNG image data, 19 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash 794c84d30e213ec6a144d64215f07551
63aff5bf4d7ee4262e9b90d9865163baa77b13f6
2eeaed1b310e214596abec926291c1a41c6333ddaeac312886fc0b5930d71f0e
GET /banners/scripts/assets/images/OBA/oba.png HTTP/1.1
Host: s1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:45 GMT
content-type: image/png
content-length: 3262
last-modified: Wed, 25 May 2022 11:49:23 GMT
x-rgw-object-type: Normal
etag: "794c84d30e213ec6a144d64215f07551"
x-amz-request-id: tx00000fbccbdbd0e4a640c-0063765d6a-32940f80-default
access-control-allow-origin: *
cache-control: public, max-age=604800
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8671
Expires: Tue, 31 Jan 2023 13:28:16 GMT
Date: Tue, 31 Jan 2023 11:03:45 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7859
Expires: Tue, 31 Jan 2023 13:14:44 GMT
Date: Tue, 31 Jan 2023 11:03:45 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70d0f84c-475c-41c3-922d-8f0be8fbfff4.jpeg
34.120.237.76200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70d0f84c-475c-41c3-922d-8f0be8fbfff4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f6790dfb54452775c77c50890d17669a
a21e3ac869acae92640075dcb9da9ded4b7f0c92
b24238875cca2327ef4df93e5e66303f02b7f64265faebcb033a245c14638817
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70d0f84c-475c-41c3-922d-8f0be8fbfff4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6481
x-amzn-requestid: ca20c9a5-983f-4cde-a833-2a561c13af95
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fY-T9FcXoAMFnlA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d3774c-665397d31a681a155b8a7d53;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 07:03:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2K6-6vxF0901zPV70niGYNjPvXA8gV31pVVZ22H2aW7xHT7UpTe56w==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 21:52:51 GMT
age: 80034
etag: "a21e3ac869acae92640075dcb9da9ded4b7f0c92"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7859
Expires: Tue, 31 Jan 2023 13:14:44 GMT
Date: Tue, 31 Jan 2023 11:03:45 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43ae4cd9-2533-48ae-8086-f8fea8a4e269.jpeg
34.120.237.76200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43ae4cd9-2533-48ae-8086-f8fea8a4e269.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 976dda397f9292a498ca9db5599c0378
dad9e9c3462907a2475046aee36d57f8309cd44e
7ed9ccf2ff75ca53f5ba56a1d2127e0f09b0ae941cad8b042e8df01ad01e614b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43ae4cd9-2533-48ae-8086-f8fea8a4e269.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6844
x-amzn-requestid: 0542cf46-5045-459f-a35f-f6c0d3f5f7b7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: flZsxH0YIAMF9ew=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d86feb-692d50f710a131df2ee49aa8;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 01:33:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 6bbFjAsd03GN8zzBnAFBm7xA8igZ_xHJsOHzw7nwNgRxiWUDLPGjpQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 01:53:29 GMT
age: 33016
etag: "dad9e9c3462907a2475046aee36d57f8309cd44e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03498770253468638&nut&uu=11f0796a73ff498eaa248c4c392b76d3
35.156.223.41200 OK 2.6 kB URL HTTP/2 ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03498770253468638&nut&uu=11f0796a73ff498eaa248c4c392b76d3
IP 35.156.223.41:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (2596), with no line terminators
Hash 23affba0f5e1e7169c633e64856d3c6a
d17fe1dcf92684a628a5a72198ac46db880f01b3
47c8bd73b01f8bf2b253df40926c082f7bee2052884c9c391474f936bfada118
GET /adscale-ih/dum?tpid=101&sec=0&tpuid=03498770253468638&nut&uu=11f0796a73ff498eaa248c4c392b76d3 HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://uloz.to/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:03:45 GMT
content-type: text/html;charset=ISO-8859-1
content-length: 2596
set-cookie: tu=4#3962593034#48~~465323~465323~1#101~03498770253468638~465323~0~0#38~~465323~465323~1#39~~465323~465323~1#57~~465323~465323~1#42~~465323~465323~1#60~~465323~465323~1#108~~465323~465323~1#63~~465323~465323~1; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
cct=1675163025645; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 63486f2a937aa8fd013fc2c2d1b32f2d
e8868de34c2f79348c1edad764259eb70bebd7a6
fa6e5ce374031c0df3b3f2d6de823cf1fe08fdaf9957a0722770867cfdec0ed1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13639
x-amzn-requestid: 8131c878-620a-4972-ba8f-1456859acae2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fYcJSF0SIAMFe1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d340a1-18c7280940d508c440c0182c;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 03:10:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mXlQ5A2PHadECkKglPquN9x68ubYk8s2to-_JjCgEQe7axfJo6K8Jw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 07:27:20 GMT
age: 12985
etag: "e8868de34c2f79348c1edad764259eb70bebd7a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
34.120.237.76200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3366ef4f8733cb9c89a5c88f63a0a441
7da46843b6d885f38a4759a08e6c899906ab7b97
7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: v9Wphg34UGE5kkZ9RKBcphcpPuCn54oVyepzTW5rZ3J9nkL9J501PA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 22:03:23 GMT
age: 46822
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2c4934be94898028e2ab696561b51462
6cf734e2d29938688913daacfb75506d8e004a94
239adcbb538b7a6d1483c65c7694d4a9f9fa9cadf456ab5681c4b764185e3596
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9987
x-amzn-requestid: 67109f87-6073-4991-b540-cdeedc2d7b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: flYlPF9uIAMFXMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d86e21-60ac2c7b37c72e6e54a5c69d;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 01:25:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hDjKAMYoVwHdCqS8t08PrWyfQQLiWaosXbi3FOJY8BeV0yAFCGziGw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 01:58:16 GMT
age: 32729
etag: "6cf734e2d29938688913daacfb75506d8e004a94"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 69ffc0a3f7ca2b025a6b99f9c38889be
1b436bda66cd246a1024f8c3d8e91e3aeef31eaa
9aaaf6c2a570c6a73a623f4fdfb0e1dfd5f16f086ae5d9c8d5b2403b0d016e4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:03:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4a2d26da68a313cc65958fc2692351c2
798c3538f3147ca77d317676ddd1bf040bd0f93b
76ce30224803d680c0115e987a712ce5552b2760beadf796a96b17439fb20797
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10898
x-amzn-requestid: e29f8dfc-07d4-4136-afaf-e1e067eea2ab
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fk3zxGshIAMFw5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d839b1-5e87d2a44722af9e4e86c3d4;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 21:42:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: djoQmYTv7Rlq9tKKkJ5U1J3YeVSIs5yzSts_xRN3bdi27Ra8UfM6OQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 21:44:45 GMT
age: 47940
etag: "798c3538f3147ca77d317676ddd1bf040bd0f93b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
status.thawte.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a0f0a79a26d7099836d4ac78201de193
1cff14338f7ea60e82ffd8215efa4d80622b59e0
d57b936f62f5784c83d3c6a5b4fea512359926c2267a20871ff5ba5d0a9530d6
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5207
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:03:45 GMT
Last-Modified: Tue, 31 Jan 2023 09:36:59 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 2ac1bcdceabf1fc4e07017906aa8a815
ba00b737325fc50b35af8d851ced0fe13d1cba22
c6c54f5dbbfc40b454b9c67a7972827f500d83b10a1594f7cb56c69158278c08
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:03:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 73d6f94eec5f7bf78dc11951011af215
2d7941713a82a83c174bf782b618a6f86a8ab2d7
9de1920abadb3501bcf9f787608807f13a266efea69f12fc811bc7cac14a3552
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:03:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-205967-8&cid=1031170634.1675163041&jid=231979193&_u=aCDAiAAjBAAAAE~&z=2135192460
216.58.211.4200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-205967-8&cid=1031170634.1675163041&jid=231979193&_u=aCDAiAAjBAAAAE~&z=2135192460
IP 216.58.211.4:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-205967-8&cid=1031170634.1675163041&jid=231979193&_u=aCDAiAAjBAAAAE~&z=2135192460 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 31 Jan 2023 11:03:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-205967-8&cid=1031170634.1675163041&jid=231979193&_u=aCDAiAAjBAAAAE~&z=2135192460
142.250.74.163200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-205967-8&cid=1031170634.1675163041&jid=231979193&_u=aCDAiAAjBAAAAE~&z=2135192460
IP 142.250.74.163:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-205967-8&cid=1031170634.1675163041&jid=231979193&_u=aCDAiAAjBAAAAE~&z=2135192460 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 31 Jan 2023 11:03:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
js.adscale.de/loadImages.js
54.230.111.128200 OK 593 B URL HTTP/2 js.adscale.de/loadImages.js
IP 54.230.111.128:0
File type ASCII text, with very long lines (593), with no line terminators
Hash 258e4d33b09926de1521f238e09fcd4c
5dc75465ac9755813a0bd5be51fb7bd88fd1b6e5
957fa807a90566ababb44d2b4c47469fdfe8975c049f92a04afd4c6961a55c0b
GET /loadImages.js HTTP/1.1
Host: js.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 593
last-modified: Fri, 09 Dec 2022 00:54:16 GMT
x-amz-version-id: rIbb7Ijy1eAhEUywFp7gjzlpoGnWNwq7
accept-ranges: bytes
server: AmazonS3
date: Tue, 31 Jan 2023 09:28:47 GMT
cache-control: max-age=7200
etag: "258e4d33b09926de1521f238e09fcd4c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KXVNn6JlNrn2xUuiuEoeEKsS6S3ZYK2vyurSKVCA8XvBDdqu8Ss-xA==
age: 5708
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash a5ff07b9b81cdf319f4a57d8d6dbbd6d
736ae15d0ed2068580d35a7cff8b33c0ec87af52
24406eda914ef8f78e1f60d6b54237ea6311f2fdf54b2b63647d84b397b41de0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:03:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 73d6f94eec5f7bf78dc11951011af215
2d7941713a82a83c174bf782b618a6f86a8ab2d7
9de1920abadb3501bcf9f787608807f13a266efea69f12fc811bc7cac14a3552
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:03:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 8874f624c08ccb9894c5c97ee686d97b
36578baca0d70b98ff21758489dac43f5c74f5e4
fb465590ef8cc1395be18dadbbc1527049ae0cbe5c7619cccfc39b8dfe5d256a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4711
Cache-Control: max-age=101765
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:03:45 GMT
Etag: "63d7cdaf-117"
Expires: Wed, 01 Feb 2023 15:19:50 GMT
Last-Modified: Mon, 30 Jan 2023 14:01:19 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 279
ssum.casalemedia.com/usermatchredir?s=183592&cb=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D63%26tpuid%3D__UID__&uid=72992292ffafa0c5a502ee873ace8274ba9beea683492501c76ac6d3fab70213&tpid=63&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F0%2Fimg
104.18.33.19302 Found 0 B URL HTTP/2 ssum.casalemedia.com/usermatchredir?s=183592&cb=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D63%26tpuid%3D__UID__&uid=72992292ffafa0c5a502ee873ace8274ba9beea683492501c76ac6d3fab70213&tpid=63&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F0%2Fimg
IP 104.18.33.19:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatchredir?s=183592&cb=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D63%26tpuid%3D__UID__&uid=72992292ffafa0c5a502ee873ace8274ba9beea683492501c76ac6d3fab70213&tpid=63&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F0%2Fimg HTTP/1.1
Host: ssum.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 31 Jan 2023 11:03:45 GMT
content-length: 0
location: /usermatchredir?cb=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D63%26tpuid%3D__UID__&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F0%2Fimg&s=183592&tpid=63&uid=72992292ffafa0c5a502ee873ace8274ba9beea683492501c76ac6d3fab70213&C=1
cf-ray: 7921f6700a8db511-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
pragma: no-cache
set-cookie: CMID=Y9j1kahiZjMIveCrlFLWzgAA; Path=/; Domain=casalemedia.com; Expires=Wed, 31 Jan 2024 11:03:45 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=1870; Path=/; Domain=casalemedia.com; Expires=Mon, 01 May 2023 11:03:45 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=1870; Path=/; Domain=casalemedia.com; Expires=Mon, 01 May 2023 11:03:45 GMT; Max-Age=7776000; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GmuDtbBtVmQppo5zWPZ16uE3R%2FyJ1U8pO4ZcgjiUDORjkzE4k51pcQmPtXOyTeyeSLlDerYnLg9oDVCDT9REk%2FNmGGGTBCXIIELWXptWDA%2B853br%2FObS01yM6K29z4vk%2FyvC6f2D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 8874f624c08ccb9894c5c97ee686d97b
36578baca0d70b98ff21758489dac43f5c74f5e4
fb465590ef8cc1395be18dadbbc1527049ae0cbe5c7619cccfc39b8dfe5d256a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4712
Cache-Control: max-age=101765
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:03:46 GMT
Etag: "63d7cdaf-117"
Expires: Wed, 01 Feb 2023 15:19:51 GMT
Last-Modified: Mon, 30 Jan 2023 14:01:19 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 279
ssum.casalemedia.com/usermatchredir?cb=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D63%26tpuid%3D__UID__&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F0%2Fimg&s=183592&tpid=63&uid=72992292ffafa0c5a502ee873ace8274ba9beea683492501c76ac6d3fab70213&C=1
104.18.33.19302 Found 0 B URL HTTP/2 ssum.casalemedia.com/usermatchredir?cb=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D63%26tpuid%3D__UID__&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F0%2Fimg&s=183592&tpid=63&uid=72992292ffafa0c5a502ee873ace8274ba9beea683492501c76ac6d3fab70213&C=1
IP 104.18.33.19:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatchredir?cb=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D63%26tpuid%3D__UID__&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F0%2Fimg&s=183592&tpid=63&uid=72992292ffafa0c5a502ee873ace8274ba9beea683492501c76ac6d3fab70213&C=1 HTTP/1.1
Host: ssum.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 31 Jan 2023 11:03:46 GMT
content-length: 0
location: https://ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=63&tpuid=0
cf-ray: 7921f6707b35b511-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UaSAhuEzJccCQOPNlPjmtmHfChCw0w%2B7gLsXJKGDFuzVnrhvcMfu2eB1Y901LJEL9a4se3iIpSDe2I2pgs0bq7UsHgfgyKzH5YOkSnBV3KDkObWvUnbAD3KgHZbd0uzjQqpfdHx9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=63&tpuid=0
35.156.223.41200 OK 49 B URL HTTP/2 ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=63&tpuid=0
IP 35.156.223.41:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /sium/429371437437189942/1437437190794/0/img?tpid=63&tpuid=0 HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:03:46 GMT
content-type: image/gif
content-length: 49
set-cookie: cct=1675163026054; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
uu=4b0254d3e8f9480eb2720504a4fd9527; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
bbnaut.ibillboard.com/g/njs/01
194.213.62.34200 OK 1.5 kB URL HTTP/2 bbnaut.ibillboard.com/g/njs/01
IP 194.213.62.34:0
ASN #13036 T-Mobile Czech Republic a.s.
Hash a73886e7bd14ba6b555a80d3ca206af0
3daeff4f7a80898839ad3ae41389f9cb15ba5c90
637cc9648529bbf929ef90f0a11fd5d7084c0733ff5ffbee5fcde0d06c1d9cab
GET /g/njs/01 HTTP/1.1
Host: bbnaut.ibillboard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:45 GMT
content-type: text/javascript
cache-control: private
expires: Fri, 28 Jan 2033 11:03:45 GMT
access-control-allow-credentials: true
X-Firefox-Spdy: h2
match.adsrvr.org/track/cmf/generic?ttd_pid=adscale&ttd_tpi=1&uid=f520cf9edee79c58bb683890ff51d329a51818069b4f7f48f08ca50e65d919e9&tpid=60&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F554%2Fimg
35.71.131.137200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=adscale&ttd_tpi=1&uid=f520cf9edee79c58bb683890ff51d329a51818069b4f7f48f08ca50e65d919e9&tpid=60&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F554%2Fimg
IP 35.71.131.137:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=adscale&ttd_tpi=1&uid=f520cf9edee79c58bb683890ff51d329a51818069b4f7f48f08ca50e65d919e9&tpid=60&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F554%2Fimg HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:03:46 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash 07565e8c3af8657ef23679f337093454
c57205d32aa9ab7ea862b74df0b2aec2b597bde3
2b1e4af6a2d5027fa7d82231a51ace3cadbd04784d9c15f242778ec81c3ecf36
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 31 Jan 2023 11:03:46 GMT
Last-Modified: Tue, 31 Jan 2023 10:22:49 GMT
Server: ECS (bsa/EB12)
X-Cache: Miss from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: xhvBFFPJJDHr0OJ3ttq_FTIIg8vyURPbLPT1aSOoTAGSIFZIinQvPA==
Age: 2457
tracking.m6r.eu/sync/adscaleRedirect?gdprFallback=true&uid=bea7930e3db05685ad393833461ca6d54bc3190fa9306421eebc8d3f8cd91ac6&tpid=48&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F732%2Fimg
3.124.13.195302 Found 289 B URL HTTP/1.1 tracking.m6r.eu/sync/adscaleRedirect?gdprFallback=true&uid=bea7930e3db05685ad393833461ca6d54bc3190fa9306421eebc8d3f8cd91ac6&tpid=48&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F732%2Fimg
IP 3.124.13.195:0
File type ASCII text, with no line terminators
Hash 27829f0ef2157dde1d077885a8eed922
cc6ed4d0bdc69b452d00356f0ae6d817d469e943
a4dfbd597547a8281758ac8abe22df64e737b3640726b61454385e8a1bb56960
GET /sync/adscaleRedirect?gdprFallback=true&uid=bea7930e3db05685ad393833461ca6d54bc3190fa9306421eebc8d3f8cd91ac6&tpid=48&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F732%2Fimg HTTP/1.1
Host: tracking.m6r.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
content-length: 289
content-type: text/plain; charset=utf-8
date: Tue, 31 Jan 2023 11:03:46 GMT
location: https://tracking-a.dsp.m6r.eu/sync/adscaleRedirect?gdprFallback=true&uid=bea7930e3db05685ad393833461ca6d54bc3190fa9306421eebc8d3f8cd91ac6&tpid=48&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F732%2Fimg&checkcookies=true
set-cookie: test=true; Max-Age=3600; Domain=m6r.eu; Path=/; Expires=Tue, 31 Jan 2023 12:03:46 GMT; Secure; SameSite=None
vary: Accept
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash 70c364bce059528a4134e4de5de812ed
0ef711de2232cadf6009c2724601c8398bb7f07f
b61ec03d8cf45c294c0f0f3ef37927c9e98c236b903a51200b50fdcff485ae67
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 31 Jan 2023 11:03:46 GMT
Last-Modified: Tue, 31 Jan 2023 09:22:12 GMT
Server: ECS (bsa/EB20)
X-Cache: Miss from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: HpOn3mW1QIo116WU9GHCuMnellKBvm7n-1jlvl8NWyr0PwdT_zMOeQ==
Age: 6094
tracking-a.dsp.m6r.eu/sync/adscaleRedirect?gdprFallback=true&uid=bea7930e3db05685ad393833461ca6d54bc3190fa9306421eebc8d3f8cd91ac6&tpid=48&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F732%2Fimg&checkcookies=true
3.124.13.195302 Found 150 B URL HTTP/1.1 tracking-a.dsp.m6r.eu/sync/adscaleRedirect?gdprFallback=true&uid=bea7930e3db05685ad393833461ca6d54bc3190fa9306421eebc8d3f8cd91ac6&tpid=48&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F732%2Fimg&checkcookies=true
IP 3.124.13.195:0
File type ASCII text, with no line terminators
Hash 290106b60d94b7c329a7a887dfc19c61
d9790f1417809eccb5f0114d5f7ff3ae0b6ddb6d
3f7ecf6e7c5ac9039e70dc04dfd6a6ab4591496ef47d23f110c7089bd6834881
GET /sync/adscaleRedirect?gdprFallback=true&uid=bea7930e3db05685ad393833461ca6d54bc3190fa9306421eebc8d3f8cd91ac6&tpid=48&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F732%2Fimg&checkcookies=true HTTP/1.1
Host: tracking-a.dsp.m6r.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Cookie: test=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
content-length: 150
content-type: text/plain; charset=utf-8
date: Tue, 31 Jan 2023 11:03:47 GMT
location: https://ih.adscale.de/sium/098127e4dac948188e87d8f460830e14/1675163025645/732/img?tpid=48&tpuid=d757ba7fd668cd5658ecb4faffec74ae
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
set-cookie: cct=1675163027045; Max-Age=7776000; Domain=m6r.eu; Path=/; Expires=Mon, 01 May 2023 11:03:47 GMT; Secure; SameSite=None
id=d757ba7fd668cd5658ecb4faffec74ae; Max-Age=7776000; Domain=m6r.eu; Path=/; Expires=Mon, 01 May 2023 11:03:47 GMT; Secure; SameSite=None
vary: Accept
ih.adscale.de/sium/098127e4dac948188e87d8f460830e14/1675163025645/732/img?tpid=48&tpuid=d757ba7fd668cd5658ecb4faffec74ae
35.156.223.41200 OK 49 B URL HTTP/2 ih.adscale.de/sium/098127e4dac948188e87d8f460830e14/1675163025645/732/img?tpid=48&tpuid=d757ba7fd668cd5658ecb4faffec74ae
IP 35.156.223.41:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /sium/098127e4dac948188e87d8f460830e14/1675163025645/732/img?tpid=48&tpuid=d757ba7fd668cd5658ecb4faffec74ae HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:03:47 GMT
content-type: image/gif
content-length: 49
set-cookie: cct=1675163027093; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
uu=7bc1c10f63a44f318e995f2625f4adfb; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
track.adform.net/serving/cookie/match/?party=9&uid=b3f74b923560539a1d59f560428b0a67a68e097be9a0356e1e15553e03e04646&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F1275%2Fimg
37.157.5.142302 Found 0 B URL HTTP/2 track.adform.net/serving/cookie/match/?party=9&uid=b3f74b923560539a1d59f560428b0a67a68e097be9a0356e1e15553e03e04646&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F1275%2Fimg
IP 37.157.5.142:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /serving/cookie/match/?party=9&uid=b3f74b923560539a1d59f560428b0a67a68e097be9a0356e1e15553e03e04646&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F1275%2Fimg HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Tue, 31 Jan 2023 11:03:47 GMT
content-length: 0
location: https://track.adform.net/serving/cookie/match/?CC=1&party=9&uid=b3f74b923560539a1d59f560428b0a67a68e097be9a0356e1e15553e03e04646&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F1275%2Fimg
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
set-cookie: C=1; expires=Tue, 28 Feb 2023 11:03:47 GMT; domain=adform.net; path=/
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash e4981767665bca208002904406076a08
b0c935282c642c8d24cf26da2e3471b8cf378793
98b5c20d3deee7d35220ca861ff5e475e072f3060fd124df9241d3d296089e6c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5319
Cache-Control: max-age=130435
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:03:47 GMT
Etag: "63d83b4f-1d7"
Expires: Wed, 01 Feb 2023 23:17:42 GMT
Last-Modified: Mon, 30 Jan 2023 21:49:03 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
track.adform.net/serving/cookie/match/?CC=1&party=9&uid=b3f74b923560539a1d59f560428b0a67a68e097be9a0356e1e15553e03e04646&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F1275%2Fimg
37.157.5.142200 OK 35 B URL HTTP/2 track.adform.net/serving/cookie/match/?CC=1&party=9&uid=b3f74b923560539a1d59f560428b0a67a68e097be9a0356e1e15553e03e04646&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F1275%2Fimg
IP 37.157.5.142:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /serving/cookie/match/?CC=1&party=9&uid=b3f74b923560539a1d59f560428b0a67a68e097be9a0356e1e15553e03e04646&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F1275%2Fimg HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:47 GMT
content-type: image/gif
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=39&tpuid=ef9d63d8-f593-4100-8855-d3e7e48e9e7c
35.156.223.41200 OK 49 B URL HTTP/2 ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=39&tpuid=ef9d63d8-f593-4100-8855-d3e7e48e9e7c
IP 35.156.223.41:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /sium/429371437437189942/1437437190794/0/img?tpid=39&tpuid=ef9d63d8-f593-4100-8855-d3e7e48e9e7c HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:03:47 GMT
content-type: image/gif
content-length: 49
set-cookie: tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
uu=65cbc10686ab4bbcbbf575a61f0917c9; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
cct=1675163027379; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=adscale&google_cm&google_sc&uid=d7f1b31d7bd9cd6fc7950ecdfca71cb6e67806b09ccc40631a9c75a8c353503a&tpid=38&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F1562%2Fimg
172.217.21.162302 Found 489 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=adscale&google_cm&google_sc&uid=d7f1b31d7bd9cd6fc7950ecdfca71cb6e67806b09ccc40631a9c75a8c353503a&tpid=38&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F1562%2Fimg
IP 172.217.21.162:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (312), with CRLF, LF line terminators
Hash dc6ed64d382d7bd143c8ad9ae391dbed
9c8b3b2768632e678ce458b8c353efad5c852d8f
e3dfab3c0a9b5d54f7cafc086cff8890539a6049170048a1e1defc8322ec4f38
GET /pixel?google_nid=adscale&google_cm&google_sc&uid=d7f1b31d7bd9cd6fc7950ecdfca71cb6e67806b09ccc40631a9c75a8c353503a&tpid=38&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F1562%2Fimg HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=adscale&google_cm=&google_sc=&uid=d7f1b31d7bd9cd6fc7950ecdfca71cb6e67806b09ccc40631a9c75a8c353503a&tpid=38&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F1562%2Fimg&google_tc=
date: Tue, 31 Jan 2023 11:03:47 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 489
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 31-Jan-2023 11:18:47 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=adscale&google_cm=&google_sc=&uid=d7f1b31d7bd9cd6fc7950ecdfca71cb6e67806b09ccc40631a9c75a8c353503a&tpid=38&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F1562%2Fimg&google_tc=
172.217.21.162200 OK 170 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=adscale&google_cm=&google_sc=&uid=d7f1b31d7bd9cd6fc7950ecdfca71cb6e67806b09ccc40631a9c75a8c353503a&tpid=38&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F1562%2Fimg&google_tc=
IP 172.217.21.162:0
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash e7673c60af825466f83d46da72ca1635
fc0fcbee0835709ba2d28798a612bfd687903fb5
0b8a20373c6dd04e091902226d922b3688143a8938afb9d283d889de7b55ceb5
GET /pixel?google_nid=adscale&google_cm=&google_sc=&uid=d7f1b31d7bd9cd6fc7950ecdfca71cb6e67806b09ccc40631a9c75a8c353503a&tpid=38&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F1562%2Fimg&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
date: Tue, 31 Jan 2023 11:03:47 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
server: HTTP server (unknown)
content-length: 170
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 5c00a6b71849e1f63887d38333830003
274723ffd4a062e1997a213ceeeab8a56ac83141
5e15ea6950fd4aa51af37519ac391c2c95cfd74ded6ac6e35432ccf68c70cb23
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 11:03:47 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 01:56:49 GMT
Expires: Sat, 04 Feb 2023 01:56:48 GMT
Etag: "274723ffd4a062e1997a213ceeeab8a56ac83141"
Cache-Control: max-age=312180,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7921f67a7edcb52d-OSL
x.bidswitch.net/sync?ssp=adscale&uid=81d9ecb0c4274f1493dcd85256d7880ddca534e9db26319936a732520ede2244&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F1683%2Fimg
3.124.23.99302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?ssp=adscale&uid=81d9ecb0c4274f1493dcd85256d7880ddca534e9db26319936a732520ede2244&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F1683%2Fimg
IP 3.124.23.99:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?ssp=adscale&uid=81d9ecb0c4274f1493dcd85256d7880ddca534e9db26319936a732520ede2244&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F1683%2Fimg HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 31 Jan 2023 11:03:47 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?ssp=adscale&uid=81d9ecb0c4274f1493dcd85256d7880ddca534e9db26319936a732520ede2244&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F1683%2Fimg
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=848b1084-6e4c-445b-ad64-2f0a0fb4c2f2; path=/; expires=Wed, 31-Jan-2024 11:03:47 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675163027; path=/; expires=Wed, 31-Jan-2024 11:03:47 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1675163027; path=/; expires=Wed, 31-Jan-2024 11:03:47 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675163027; path=/; expires=Wed, 31-Jan-2024 11:03:47 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
track.adform.net/serving/unload/?version=15&unload=-5932061713061764574@@12487188,2955272137632706810,100|1039|0|789|436|0|0|0|0||66|0|||||1|0|0|OyFmELpARjmjXuUM8tfH4hazj2RYsgytiwNRt6eOXPZSE4N4DfChFAJ1gDRGwv2I0|||10|0|0
37.157.5.142200 OK 35 B URL HTTP/2 track.adform.net/serving/unload/?version=15&unload=-5932061713061764574@@12487188,2955272137632706810,100|1039|0|789|436|0|0|0|0||66|0|||||1|0|0|OyFmELpARjmjXuUM8tfH4hazj2RYsgytiwNRt6eOXPZSE4N4DfChFAJ1gDRGwv2I0|||10|0|0
IP 37.157.5.142:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
POST /serving/unload/?version=15&unload=-5932061713061764574@@12487188,2955272137632706810,100|1039|0|789|436|0|0|0|0||66|0|||||1|0|0|OyFmELpARjmjXuUM8tfH4hazj2RYsgytiwNRt6eOXPZSE4N4DfChFAJ1gDRGwv2I0|||10|0|0 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://uloz.to
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:47 GMT
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: https://uloz.to
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Content-Type, Cache-Control, Accept-Encoding, X-Requested-With
access-control-max-age: 86400
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ih.adscale.de/adscale-ih/sium?tpid=57&tpuid=0&gdpr=&gdpr_consent=
35.156.223.41200 OK 49 B URL HTTP/2 ih.adscale.de/adscale-ih/sium?tpid=57&tpuid=0&gdpr=&gdpr_consent=
IP 35.156.223.41:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /adscale-ih/sium?tpid=57&tpuid=0&gdpr=&gdpr_consent= HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:03:47 GMT
content-type: image/gif
content-length: 49
set-cookie: cct=1675163027732; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
uu=def4bd2aa8904f9bb8ea3b3d27137574; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
sync.mathtag.com/sync/img?mt_exid=26&redir=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D108%26tpuid%3D%5BMM_UUID%5D&uid=f1fe3fa9b64fe29c96f211c1a7d9ebea84371b81bffedec6e1370686914230d8&tpid=108&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F1911%2Fimg
185.29.134.248302 Moved Temporarily 0 B URL HTTP/1.1 sync.mathtag.com/sync/img?mt_exid=26&redir=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D108%26tpuid%3D%5BMM_UUID%5D&uid=f1fe3fa9b64fe29c96f211c1a7d9ebea84371b81bffedec6e1370686914230d8&tpid=108&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F1911%2Fimg
IP 185.29.134.248:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/img?mt_exid=26&redir=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D108%26tpuid%3D%5BMM_UUID%5D&uid=f1fe3fa9b64fe29c96f211c1a7d9ebea84371b81bffedec6e1370686914230d8&tpid=108&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F098127e4dac948188e87d8f460830e14%2F1675163025645%2F1911%2Fimg HTTP/1.1
Host: sync.mathtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Tue, 31 Jan 2023 11:03:47 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=360
Access-Control-Allow-Origin: *
Server: MT3 404 ce67235 master cdg-pixel-x9 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: uuid=fb1363d8-f593-4d00-b4aa-c1f1c36a9c9d; domain=.mathtag.com; path=/; expires=Wed, 28-Feb-2024 11:03:47 GMT; SameSite=None; Secure
location: https://ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=108&tpuid=fb1363d8-f593-4d00-b4aa-c1f1c36a9c9d
Expires: Tue, 31 Jan 2023 11:03:46 GMT
ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=108&tpuid=fb1363d8-f593-4d00-b4aa-c1f1c36a9c9d
35.156.223.41200 OK 49 B URL HTTP/2 ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=108&tpuid=fb1363d8-f593-4d00-b4aa-c1f1c36a9c9d
IP 35.156.223.41:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /sium/429371437437189942/1437437190794/0/img?tpid=108&tpuid=fb1363d8-f593-4d00-b4aa-c1f1c36a9c9d HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:03:47 GMT
content-type: image/gif
content-length: 49
set-cookie: cct=1675163027809; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
uu=76a559522ca946028375543d6b094707; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
bbnaut.ibillboard.com/match/AdScale?partneruid=46938a90ca1d4698a7ff6a1a1601157b
194.213.62.34200 OK 795 B URL HTTP/2 bbnaut.ibillboard.com/match/AdScale?partneruid=46938a90ca1d4698a7ff6a1a1601157b
IP 194.213.62.34:0
ASN #13036 T-Mobile Czech Republic a.s.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 89831523682363fc8bd21f35d6b7bb2e
a8ca50b62a75896ca1e26306eb27b2643a371bbb
5c73620f6c57968a037ccf03a31108951b91c1b20c610e0ecbd341fba7977391
GET /match/AdScale?partneruid=46938a90ca1d4698a7ff6a1a1601157b HTTP/1.1
Host: bbnaut.ibillboard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:47 GMT
content-type: image/gif
cache-control: private, max-age=86400
access-control-allow-credentials: true
X-Firefox-Spdy: h2
download.greencdn.io/speedtest.json?_=1675163040620
93.99.2.120200 OK 178 B URL HTTP/2 download.greencdn.io/speedtest.json?_=1675163040620
IP 93.99.2.120:0
ASN #16019 Vodafone Czech Republic a.s.
File type JSON data\012- , ASCII text, with no line terminators
Hash cb2ecb776c21d86c93d52371c78dee85
bb360f53a0d9a18cd7f385968dcc1b1dccadc35b
5d035b0d8c627f168920b9ba808bfc5992c4a913fd847f4dbdbe60e0b185b670
GET /speedtest.json?_=1675163040620 HTTP/1.1
Host: download.greencdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://uloz.to
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 31 Jan 2023 11:03:48 GMT
content-type: application/json
content-length: 178
expires: Tue, 31 Jan 2023 11:03:53 GMT
access-control-allow-origin: *
upgrade-insecure-requests: 1
X-Firefox-Spdy: h2
uloz.to/detect.html?adblock=0×tamp=1378395240
93.99.2.80200 OK 11 B URL HTTP/2 uloz.to/detect.html?adblock=0×tamp=1378395240
IP 93.99.2.80:0
ASN #16019 Vodafone Czech Republic a.s.
Hash dc1342749768d306c75e85f051948538
a93b30924fd08a79d386799109325e7c5e276dcf
9d04e229036853c5f10e9aa473df15d1394d402dd1f780bb32476d90e1afbe9a
GET /detect.html?adblock=0×tamp=1378395240 HTTP/1.1
Host: uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://uloz.to/file/T185nTsvs3BM/die-hit-giganten-2011-best-of-80s-rar
Cookie: _nss=1; ULOSESSID=lrv6h1ad7hj8vle61hg3mk759q; uloztoid=2067298116; skin-switcher-selection=light; abtest=0; _ga_L4S9E2Y7WN=GS1.1.1675163041.1.0.1675163041.0.0.0; _ga=GA1.2.1031170634.1675163041; _pk_id.1.6747=873fce5c2da73b8a.1675163041.; _pk_ses.1.6747=1; _gid=GA1.2.1989338495.1675163042; uloztoid2=2067298116; _dc_gtm_UA-205967-8=1; ibbid=BBID-01-03498770254802748-16828992; adblock_detected=false
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:48 GMT
content-type: text/html
content-length: 11
last-modified: Tue, 17 Jan 2023 08:53:09 GMT
etag: "63c661f5-b"
x-node-name: ulozto4
accept-ranges: bytes
X-Firefox-Spdy: h2
go.eu.bbelements.com/please/code?i-17114.2.2.64.1920.1500.0.0.0.0.0.0._blank
62.168.44.115200 OK 2.8 kB URL HTTP/1.1 go.eu.bbelements.com/please/code?i-17114.2.2.64.1920.1500.0.0.0.0.0.0._blank
IP 62.168.44.115:0
ASN #13036 T-Mobile Czech Republic a.s.
File type ASCII text, with very long lines (3393), with CRLF, LF line terminators
Hash 80bceca24a2875e66dac20df8e2c8343
a64b158fb991e433660e207e8250562db93fb114
1b864519322e6819de41407c68078b95b1861bf0be8be94650a654ce5d81d8b7
GET /please/code?i-17114.2.2.64.1920.1500.0.0.0.0.0.0._blank HTTP/1.1
Host: go.eu.bbelements.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advert.uloz.to/
Cookie: bm2uu=0_0_1675163024_18_0_0_(null)~*
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 31 Jan 2023 11:03:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: close
Expires: Tue, 31 Jan 2023 13:03:48 GMT
P3P: CP="CUR ADM DEV OUR STP PRE DSP NOI COR NID"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8b4d87b55bc1039719c18425f044457c
71005b5c5b7bf00990c46582c0cafa3d3fac7c0b
250daf316e834f1ce8f3a630eee126f2c0cbad77bc5c6d204195a8f45659379e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "250DAF316E834F1CE8F3A630EEE126F2C0CBAD77BC5C6D204195A8F45659379E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=478
Expires: Tue, 31 Jan 2023 11:11:46 GMT
Date: Tue, 31 Jan 2023 11:03:48 GMT
Connection: keep-alive
megadarky.ic.cz/16947-ulozto_ads_small/nausnice-harry-potter-cokoladova-zabka-pecky.jpg
77.48.29.194200 OK 1.9 kB URL HTTP/2 megadarky.ic.cz/16947-ulozto_ads_small/nausnice-harry-potter-cokoladova-zabka-pecky.jpg
IP 77.48.29.194:0
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash 21feddd0601276e62618eb7b7a9a53e0
3e364748e0d014105d84df4a58ad4e7ac60e2b7f
93502ffa2519f111ba9d54d101fe8890b99fbef1173851e7f56c72320774ea1a
GET /16947-ulozto_ads_small/nausnice-harry-potter-cokoladova-zabka-pecky.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/ad19.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:04:51 GMT
content-type: image/jpeg
content-length: 1892
last-modified: Mon, 04 Oct 2021 12:34:57 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:04:51 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/16615-ulozto_ads_small/plakat-na-dvere-harley-quinn-wink.jpg
77.48.29.194200 OK 2.2 kB URL HTTP/2 megadarky.ic.cz/16615-ulozto_ads_small/plakat-na-dvere-harley-quinn-wink.jpg
IP 77.48.29.194:0
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash f9fdfde5f02a56991294f1e9fdeaa0b6
9f4d1bc7661cba9fa20307b6e4343bca615c262f
76608c5b3a86d6b2b6118e3d7490e204d3833837358bb50632376e02504c9f63
GET /16615-ulozto_ads_small/plakat-na-dvere-harley-quinn-wink.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/ad19.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:04:51 GMT
content-type: image/jpeg
content-length: 2226
last-modified: Mon, 04 Oct 2021 12:30:27 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:04:51 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/5730-ulozto_ads_small/privesek-diamant.jpg
77.48.29.194200 OK 3.9 kB URL HTTP/2 megadarky.ic.cz/5730-ulozto_ads_small/privesek-diamant.jpg
IP 77.48.29.194:0
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", progressive, precision 8, 80x80, components 3\012- data
Hash 12e2e71fc955db465fa27ff1d03ff39a
d99b32ee0af4985dadb9bb1ba6d30dc5c1d29cfe
0dda6d659df93cc9fbf898d2cfb67fc19cece9263117dff93545699ac9e0b54b
GET /5730-ulozto_ads_small/privesek-diamant.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/ad19.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:04:51 GMT
content-type: image/jpeg
content-length: 3949
last-modified: Fri, 04 Sep 2015 09:58:16 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:04:51 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 40bac282ee9730b7a7fde839fcf58736
be00063ec5c760560f34663d0a6a9cad87cfebe4
45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:03:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
megadarky.ic.cz/8621-ulozto_ads_small/ruze-z-jericha.jpg
77.48.29.194200 OK 4.5 kB URL HTTP/2 megadarky.ic.cz/8621-ulozto_ads_small/ruze-z-jericha.jpg
IP 77.48.29.194:0
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", progressive, precision 8, 80x80, components 3\012- data
Hash 832c71e30065557906ca9381638bf09c
d16c4630f472061d538791bb363ad369920a0241
46ff276e4dae659484feaaed23d2a32abdfd8ce9ed5ba44b21cb3a22f0334e28
GET /8621-ulozto_ads_small/ruze-z-jericha.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/ad19.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:04:51 GMT
content-type: image/jpeg
content-length: 4490
last-modified: Fri, 04 Sep 2015 10:00:11 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:04:51 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/16011-ulozto_ads_small/bitcoin.jpg
77.48.29.194200 OK 3.3 kB URL HTTP/2 megadarky.ic.cz/16011-ulozto_ads_small/bitcoin.jpg
IP 77.48.29.194:0
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", progressive, precision 8, 80x80, components 3\012- data
Hash 4764d80b584f0611ffcb7c6f614d96fe
e264e73907f920a7cb487d3f62e5529b35f29c6d
c7745ce60ae613eba8f08829af1551a8c72b5f68f47bfc5585431e7018b76e99
GET /16011-ulozto_ads_small/bitcoin.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/ad19.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:04:51 GMT
content-type: image/jpeg
content-length: 3317
last-modified: Thu, 19 Sep 2019 15:03:38 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:04:51 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/16978-ulozto_ads_small/zapisnik-nightmare-before-christmas-moonlight-madness.jpg
77.48.29.194200 OK 2.0 kB URL HTTP/2 megadarky.ic.cz/16978-ulozto_ads_small/zapisnik-nightmare-before-christmas-moonlight-madness.jpg
IP 77.48.29.194:0
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash 8118a500738ad4584231512264ece2ba
4a14b1d90f1b5c176ff7999b8f8e57eec2361b51
4ec14cb642eb15b4fbc438119d8f2655708536cdc846d614a4e66ae9164eca52
GET /16978-ulozto_ads_small/zapisnik-nightmare-before-christmas-moonlight-madness.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/ad19.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:04:51 GMT
content-type: image/jpeg
content-length: 1962
last-modified: Mon, 04 Oct 2021 12:35:34 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:04:51 GMT
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/2.1.4/jquery.min.js
142.250.74.74200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/2.1.4/jquery.min.js
IP 142.250.74.74:0
File type ASCII text, with very long lines (32025)
Hash 83b3b5729cdff3976db52c51831e96b8
d23dc823e37f58e5366340be755730f3fa9a850d
675fa88b39008a09994460a93b310a7d4593735009a9b24b6f176c347ad12421
GET /ajax/libs/jquery/2.1.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29725
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 10:14:16 GMT
expires: Sat, 27 Jan 2024 10:14:16 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 348572
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
megadarky.ic.cz/16129-ulozto_ads_small/hrnek-assassins-creed.jpg
77.48.29.194200 OK 2.2 kB URL HTTP/2 megadarky.ic.cz/16129-ulozto_ads_small/hrnek-assassins-creed.jpg
IP 77.48.29.194:0
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash 66ac0a62a0d5d7c49ba1b5578066bb84
abbcd8b0da101fc877315081cd7c2b2d85616025
ccd9fba1b3d729f6fd7c7cc218357f88347904000cc651b4cf5957bb53714e6c
GET /16129-ulozto_ads_small/hrnek-assassins-creed.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/ad19.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:04:51 GMT
content-type: image/jpeg
content-length: 2219
last-modified: Mon, 04 Oct 2021 12:23:08 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:04:51 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/16990-ulozto_ads_small/rohozka-dc-comics-batman.jpg
77.48.29.194200 OK 2.7 kB URL HTTP/2 megadarky.ic.cz/16990-ulozto_ads_small/rohozka-dc-comics-batman.jpg
IP 77.48.29.194:0
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash 702d8e337aec628d0261e2aac3895bb6
4a1190432bd4ba512d08e1e5341c2218036a6498
40cb84163021949bd33d8e8202bbe3ff714ea2ff81e7ce2f67010189e99f9607
GET /16990-ulozto_ads_small/rohozka-dc-comics-batman.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/ad19.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:04:51 GMT
content-type: image/jpeg
content-length: 2718
last-modified: Mon, 04 Oct 2021 12:35:51 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:04:51 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/16456-ulozto_ads_small/zalozka-harry-potter-nastupiste-9-a-3-4.jpg
77.48.29.194200 OK 1.4 kB URL HTTP/2 megadarky.ic.cz/16456-ulozto_ads_small/zalozka-harry-potter-nastupiste-9-a-3-4.jpg
IP 77.48.29.194:0
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash 1f3aad50618da25ea50514e5971e7e50
bd88414d95227714f9487ad02bbe0177439da985
62f872f12d804663ecd0f22ae9f67085b717f54f2bd2601c9fb4c4b8f5f10851
GET /16456-ulozto_ads_small/zalozka-harry-potter-nastupiste-9-a-3-4.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/ad19.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:04:51 GMT
content-type: image/jpeg
content-length: 1378
last-modified: Mon, 04 Oct 2021 12:27:50 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:04:51 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/15647-ulozto_ads_small/stroj-na-popcorn.jpg
77.48.29.194200 OK 7.9 kB URL HTTP/2 megadarky.ic.cz/15647-ulozto_ads_small/stroj-na-popcorn.jpg
IP 77.48.29.194:0
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", progressive, precision 8, 80x80, components 3\012- data
Hash 170f9bbfdbd4e0a9757a5c3490d4f280
4c74e38420ae3836ffc3e6f02532841ebf78f1f0
8d9e58e9cb882e1a331493b272c1e9fbb8629ae447eba29b1f24cae92b416b0a
GET /15647-ulozto_ads_small/stroj-na-popcorn.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/ad19.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:04:51 GMT
content-type: image/jpeg
content-length: 7941
last-modified: Thu, 16 Nov 2017 15:07:56 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:04:51 GMT
X-Firefox-Spdy: h2
content-cache31.greencdn.io/50k.bin?_=1675163040622
93.99.2.28200 OK 51 kB URL HTTP/1.1 content-cache31.greencdn.io/50k.bin?_=1675163040622
IP 93.99.2.28:0
ASN #16019 Vodafone Czech Republic a.s.
Hash bf235f22df3e004ede21041978c24f2e
7188972f71aee4c62669330ff7776e48094b4d9d
16fa66a7dc98d93f2a4c5d20baf5177f59c4c37fc62face65690c11c15fe6ff9
GET /50k.bin?_=1675163040622 HTTP/1.1
Host: content-cache31.greencdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://uloz.to
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 31 Jan 2023 11:03:48 GMT
Content-Type: application/octet-stream
Content-Length: 51200
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 09:26:58 GMT
ETag: "633d4de2-c800"
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Security-Policy: upgrade-insecure-requests
Accept-Ranges: bytes
content-provider44.greencdn.io/50k.bin?_=1675163040623
93.99.2.146200 OK 51 kB URL HTTP/1.1 content-provider44.greencdn.io/50k.bin?_=1675163040623
IP 93.99.2.146:0
ASN #16019 Vodafone Czech Republic a.s.
Hash bf235f22df3e004ede21041978c24f2e
7188972f71aee4c62669330ff7776e48094b4d9d
16fa66a7dc98d93f2a4c5d20baf5177f59c4c37fc62face65690c11c15fe6ff9
GET /50k.bin?_=1675163040623 HTTP/1.1
Host: content-provider44.greencdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://uloz.to
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 31 Jan 2023 11:03:48 GMT
Content-Type: application/octet-stream
Content-Length: 51200
Connection: keep-alive
Last-Modified: Mon, 30 Nov 2020 14:29:01 GMT
ETag: "5fc501ad-c800"
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Security-Policy: upgrade-insecure-requests
Accept-Ranges: bytes
megadarky.ic.cz/16887-ulozto_ads_small/darkova-sada-stranger-things-lights.jpg
77.48.29.194200 OK 2.7 kB URL HTTP/2 megadarky.ic.cz/16887-ulozto_ads_small/darkova-sada-stranger-things-lights.jpg
IP 77.48.29.194:0
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash d9dac7be09a419dc4ddf9061d0260324
b3bba889a6f55db50000024be69609e3609edc68
75fe5722b8d8b3a8af420aeec3ccdd150c5bf9009bcb94d44bb0e528f07157cf
GET /16887-ulozto_ads_small/darkova-sada-stranger-things-lights.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/ad19.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:04:51 GMT
content-type: image/jpeg
content-length: 2741
last-modified: Mon, 04 Oct 2021 12:33:57 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:04:51 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/16880-ulozto_ads_small/naramek-s-privesky-harry-potter-kovovy.jpg
77.48.29.194200 OK 1.8 kB URL HTTP/2 megadarky.ic.cz/16880-ulozto_ads_small/naramek-s-privesky-harry-potter-kovovy.jpg
IP 77.48.29.194:0
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash d739727a14919b1e1b125409d3f34efb
a98bd37d1cf4f34e8789d8dc94812c1817454814
f039f4c7e218b95fd44fd7d376d975b014f33c576ff1d9a5f9fbf21539a260e7
GET /16880-ulozto_ads_small/naramek-s-privesky-harry-potter-kovovy.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/ad19.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:04:51 GMT
content-type: image/jpeg
content-length: 1815
last-modified: Mon, 04 Oct 2021 12:33:51 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:04:51 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/17022-ulozto_ads_small/plakat-na-dvere-star-wars-mandalorian-special-tricks.jpg
77.48.29.194200 OK 1.8 kB URL HTTP/2 megadarky.ic.cz/17022-ulozto_ads_small/plakat-na-dvere-star-wars-mandalorian-special-tricks.jpg
IP 77.48.29.194:0
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash 151e57361748c147aaf0c290ba90730f
dea5ffbc66325d38a30a639e44ffa645eb0b360c
1d1b239cd267701289ce1623983bcfe450a99260da9bc792c4e0f9676f114923
GET /17022-ulozto_ads_small/plakat-na-dvere-star-wars-mandalorian-special-tricks.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/ad19.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:04:51 GMT
content-type: image/jpeg
content-length: 1839
last-modified: Mon, 04 Oct 2021 12:36:26 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:04:51 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/17060-ulozto_ads_small/pullitr-jdeme-na-pivo.jpg
77.48.29.194200 OK 2.7 kB URL HTTP/2 megadarky.ic.cz/17060-ulozto_ads_small/pullitr-jdeme-na-pivo.jpg
IP 77.48.29.194:0
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", progressive, precision 8, 80x80, components 3\012- data
Hash 8d70e2615803b73b7b5cf8131d941dc3
13669c04d9981847b109ea118050f526a3b2513f
14fd7b8fc6c271bd36be6d33f6aa4247cdfd5ae06e03d89d1a33c222842ad5ae
GET /17060-ulozto_ads_small/pullitr-jdeme-na-pivo.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/ad19.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:04:51 GMT
content-type: image/jpeg
content-length: 2696
last-modified: Wed, 10 Nov 2021 08:40:56 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:04:51 GMT
X-Firefox-Spdy: h2
go.eu.bbelements.com/please/showit/17114/2/2/64/?typkodu=html&ubl=en-US&ucd=24&uce=1&uje=0&uah=1002&uaw=1280&uhe=1024&uwi=1280&uto=0&uti=1675163044767&__INWIDTH=1268&__INHEIGHT=1500&href=https%3A//advert.uloz.to/ads/ad-6547.html%3Flogged%3D0%26page%3Dfile%252FT185nTsvs3BM%252Fdie-hit-giganten-2011-best-of-80s-rar%26origin%3Duloz.to%26adult%3D0%26hide_video%3D0&bgcolor=FFFFFF&text=000000&link=0000FF&bust=0.7806840846175074&target=_blank
62.168.44.115200 OK 2.3 kB URL HTTP/1.1 go.eu.bbelements.com/please/showit/17114/2/2/64/?typkodu=html&ubl=en-US&ucd=24&uce=1&uje=0&uah=1002&uaw=1280&uhe=1024&uwi=1280&uto=0&uti=1675163044767&__INWIDTH=1268&__INHEIGHT=1500&href=https%3A//advert.uloz.to/ads/ad-6547.html%3Flogged%3D0%26page%3Dfile%252FT185nTsvs3BM%252Fdie-hit-giganten-2011-best-of-80s-rar%26origin%3Duloz.to%26adult%3D0%26hide_video%3D0&bgcolor=FFFFFF&text=000000&link=0000FF&bust=0.7806840846175074&target=_blank
IP 62.168.44.115:0
ASN #13036 T-Mobile Czech Republic a.s.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3393), with CRLF, LF line terminators
Hash f0275a948911d692f4ad3c48fff4a334
dc08b41f30a1a1ac51908b05ec8885c7dcda381f
12719499e5eed09f094e6ed113031447ae3dc3e6aab07ec77f044c6859f72dd3
GET /please/showit/17114/2/2/64/?typkodu=html&ubl=en-US&ucd=24&uce=1&uje=0&uah=1002&uaw=1280&uhe=1024&uwi=1280&uto=0&uti=1675163044767&__INWIDTH=1268&__INHEIGHT=1500&href=https%3A//advert.uloz.to/ads/ad-6547.html%3Flogged%3D0%26page%3Dfile%252FT185nTsvs3BM%252Fdie-hit-giganten-2011-best-of-80s-rar%26origin%3Duloz.to%26adult%3D0%26hide_video%3D0&bgcolor=FFFFFF&text=000000&link=0000FF&bust=0.7806840846175074&target=_blank HTTP/1.1
Host: go.eu.bbelements.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advert.uloz.to/
Cookie: bm2uu=0_0_1675163024_18_0_0_(null)~*
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 31 Jan 2023 11:03:48 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
expires: -1
cache-control: no-cache
p3p: CP="CUR ADM DEV OUR STP PRE DSP NOI COR NID"
Content-Encoding: gzip
megadarky.ic.cz/16925-ulozto_ads_small/klicenka-captain-america-shield-3d.jpg
77.48.29.194200 OK 1.7 kB URL HTTP/2 megadarky.ic.cz/16925-ulozto_ads_small/klicenka-captain-america-shield-3d.jpg
IP 77.48.29.194:0
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash 8b02e8dfb5780412a387a25d5fcf0874
9ac500ecfa6d8fa12e00e51ee7164757e22fac51
3b7db2ab9fa88bd28802841baf9117caa7b4c1c0f81ea3df341ca8abdbf23d2e
GET /16925-ulozto_ads_small/klicenka-captain-america-shield-3d.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/ad19.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:04:51 GMT
content-type: image/jpeg
content-length: 1655
last-modified: Mon, 04 Oct 2021 12:34:29 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:04:51 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/10796-ulozto_ads_small/zamilovana-fazole.jpg
77.48.29.194200 OK 6.4 kB URL HTTP/2 megadarky.ic.cz/10796-ulozto_ads_small/zamilovana-fazole.jpg
IP 77.48.29.194:0
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", progressive, precision 8, 80x80, components 3\012- data
Hash a2ef0f690257890ac1b8fabc3eb7dc9a
e86137f99124606f26c3d23fe81173532c6dd7a3
8bad33e566edec299b375e3a2f3e3eabf155ab791aae7b503884f0a759f6f3cb
GET /10796-ulozto_ads_small/zamilovana-fazole.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/ad19.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:04:51 GMT
content-type: image/jpeg
content-length: 6408
last-modified: Fri, 04 Sep 2015 10:05:49 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:04:51 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/17003-ulozto_ads_small/rohozka-friends-central-perk-pryz.jpg
77.48.29.194200 OK 1.9 kB URL HTTP/2 megadarky.ic.cz/17003-ulozto_ads_small/rohozka-friends-central-perk-pryz.jpg
IP 77.48.29.194:0
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash 9608150be5a9d65b63e3de54d5fd788c
48162a8151796b31de50073309485f49cc8706ae
e649e96bd003f850db0c7e075ddf8fbdd6b8878e2dc506ed9f5ec14cbd94b87f
GET /17003-ulozto_ads_small/rohozka-friends-central-perk-pryz.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/ad19.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:04:51 GMT
content-type: image/jpeg
content-length: 1854
last-modified: Mon, 04 Oct 2021 12:36:07 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:04:51 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/16605-ulozto_ads_small/penezenka-assassin-s-creed-crest.jpg
77.48.29.194200 OK 2.4 kB URL HTTP/2 megadarky.ic.cz/16605-ulozto_ads_small/penezenka-assassin-s-creed-crest.jpg
IP 77.48.29.194:0
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash 6163459b779585ff14d2ec378c445eb5
71726f6f8daa25c84d41add3218b5290ae3cae69
acffa6ef319b4b536e1b5fd08b5acb2bcaed29ca7fa5d862f5efe7f5a17d34f8
GET /16605-ulozto_ads_small/penezenka-assassin-s-creed-crest.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/ad19.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:04:51 GMT
content-type: image/jpeg
content-length: 2433
last-modified: Mon, 04 Oct 2021 12:30:19 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:04:51 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/mgd-logo.png
77.48.29.194200 OK 5.9 kB URL HTTP/2 megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/mgd-logo.png
IP 77.48.29.194:0
ASN #16019 Vodafone Czech Republic a.s.
File type PNG image data, 80 x 80, 8-bit/color RGB, non-interlaced\012- data
Hash f6a12696bbcbd651c9f9240a6c9e8fa4
57ccfdd692110a46cfae4f388c356e100aa7bb91
8db95b7e96837e4a07b5224c65221b0996abb68da066a085b7f8c8ceb5e4c7fa
GET /ulozto_ads/ulozto_ads_5/ads/mgd-logo.png HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/ad19.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:04:51 GMT
content-type: image/png
content-length: 5943
last-modified: Wed, 01 Jun 2016 08:34:47 GMT
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:04:51 GMT
etag: "574e9e27-1737"
accept-ranges: bytes
X-Firefox-Spdy: h2
content-cache33.greencdn.io/50k.bin?_=1675163040621
93.99.2.61200 OK 51 kB URL HTTP/1.1 content-cache33.greencdn.io/50k.bin?_=1675163040621
IP 93.99.2.61:0
ASN #16019 Vodafone Czech Republic a.s.
Hash bf235f22df3e004ede21041978c24f2e
7188972f71aee4c62669330ff7776e48094b4d9d
16fa66a7dc98d93f2a4c5d20baf5177f59c4c37fc62face65690c11c15fe6ff9
GET /50k.bin?_=1675163040621 HTTP/1.1
Host: content-cache33.greencdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://uloz.to
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 31 Jan 2023 11:03:48 GMT
Content-Type: application/octet-stream
Content-Length: 51200
Connection: keep-alive
Last-Modified: Tue, 11 Oct 2022 08:53:20 GMT
ETag: "63452f00-c800"
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Security-Policy: upgrade-insecure-requests
Accept-Ranges: bytes
static.uloz.to/javascript/require.js?v=3.300.236
93.99.2.84200 OK 58 kB URL HTTP/2 static.uloz.to/javascript/require.js?v=3.300.236
IP 93.99.2.84:0
ASN #16019 Vodafone Czech Republic a.s.
Hash 26ae096a22ddcc5987f0171aa338011e
3a4fbecd870429dc06a7d6295ba443963487ec37
e03b33a2b757f3cb1823d4c232801be87ae39e983addc834adf7107069aa4817
GET /javascript/require.js?v=3.300.236 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advert.uloz.to/
Cookie: ULOSESSID=lrv6h1ad7hj8vle61hg3mk759q; uloztoid=2067298116; _ga_L4S9E2Y7WN=GS1.1.1675163041.1.0.1675163041.0.0.0; _ga=GA1.2.1031170634.1675163041; _gid=GA1.2.1989338495.1675163042; uloztoid2=2067298116; _dc_gtm_UA-205967-8=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:48 GMT
content-type: application/x-javascript
last-modified: Thu, 12 Jan 2023 09:31:42 GMT
etag: W/"63bfd37e-451f"
expires: Tue, 31 Jan 2023 23:03:48 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 40bac282ee9730b7a7fde839fcf58736
be00063ec5c760560f34663d0a6a9cad87cfebe4
45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:03:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
content-provider44.greencdn.io/1m.bin?_=1675163040625
93.99.2.146200 OK 1.0 MB URL HTTP/1.1 content-provider44.greencdn.io/1m.bin?_=1675163040625
IP 93.99.2.146:0
ASN #16019 Vodafone Czech Republic a.s.
Size 1.0 MB (1048576 bytes)
Hash b6d81b360a5672d80c27430f39153e2c
3b71f43ff30f4b15b5cd85dd9e95ebc7e84eb5a3
30e14955ebf1352266dc2ff8067e68104607e750abb9d3b36582b8af909fcb58
GET /1m.bin?_=1675163040625 HTTP/1.1
Host: content-provider44.greencdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://uloz.to
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 31 Jan 2023 11:03:48 GMT
Content-Type: application/octet-stream
Content-Length: 1048576
Connection: keep-alive
Last-Modified: Mon, 30 Nov 2020 14:29:01 GMT
ETag: "5fc501ad-100000"
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Security-Policy: upgrade-insecure-requests
Accept-Ranges: bytes
static.uloz.to/staticadvert/branding/2023/Sony_PS_relunch_1-2_2023/branding.jpg
93.99.2.84200 OK 318 kB URL HTTP/2 static.uloz.to/staticadvert/branding/2023/Sony_PS_relunch_1-2_2023/branding.jpg
IP 93.99.2.84:0
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1200, components 3\012- data
Size 318 kB (317771 bytes)
Hash 1bf5cf6d5d91aa784201a1ccd43444f4
9ecc29ab0daec91f413b28667ef2a8411e077248
a2b804214e9dc4b76a1b7a94c0ac5753ddc575cb222886941398f4bfbc3f709d
GET /staticadvert/branding/2023/Sony_PS_relunch_1-2_2023/branding.jpg HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.eu.bbelements.com/
Cookie: uloztoid=2067298116; uloztoid2=2067298116
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:48 GMT
content-type: image/jpeg
content-length: 317771
last-modified: Mon, 30 Jan 2023 09:45:03 GMT
etag: "63d7919f-4d94b"
expires: Tue, 31 Jan 2023 23:03:48 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 33e403367d183257be0f03f28da923d2
a586e4052008741f8f535e7bd12a94bde81b264e
82ce104749546e6a6f76a8ddf19b67795784c06256581c13f499e80e4f713131
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:03:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ad.doubleclick.net/ddm/trackimp/N1306638.2061108ROOTMEDIA.CZ/B29318337.358205375;dc_trk_aid=549463771;dc_trk_cid=186328944;ord=1675163028;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ltd=?
216.58.207.230200 OK 42 B URL HTTP/2 ad.doubleclick.net/ddm/trackimp/N1306638.2061108ROOTMEDIA.CZ/B29318337.358205375;dc_trk_aid=549463771;dc_trk_cid=186328944;ord=1675163028;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ltd=?
IP 216.58.207.230:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ddm/trackimp/N1306638.2061108ROOTMEDIA.CZ/B29318337.358205375;dc_trk_aid=549463771;dc_trk_cid=186328944;ord=1675163028;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ltd=? HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.eu.bbelements.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 31 Jan 2023 11:03:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 31-Jan-2023 11:18:48 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 33e403367d183257be0f03f28da923d2
a586e4052008741f8f535e7bd12a94bde81b264e
82ce104749546e6a6f76a8ddf19b67795784c06256581c13f499e80e4f713131
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:03:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03498770253468638
35.156.223.41302 Found 0 B URL HTTP/2 ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03498770253468638
IP 35.156.223.41:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adscale-ih/dum?tpid=101&sec=0&tpuid=03498770253468638 HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.eu.bbelements.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 31 Jan 2023 11:03:48 GMT
content-length: 0
location: https://ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03498770253468638&nut&uu=e935c24ff59149289e4bf8e9c4203ae8
set-cookie: uu=e935c24ff59149289e4bf8e9c4203ae8; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
cct=1675163028980; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03498770253468638
35.156.223.41302 Found 0 B URL HTTP/2 ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03498770253468638
IP 35.156.223.41:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adscale-ih/dum?tpid=101&sec=0&tpuid=03498770253468638 HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advert.uloz.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 31 Jan 2023 11:03:48 GMT
content-length: 0
location: https://ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03498770253468638&nut&uu=d5e2cddf3eb94c72b9c56b52d4700248
set-cookie: uu=d5e2cddf3eb94c72b9c56b52d4700248; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
cct=1675163028981; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03498770253468638&nut&uu=e935c24ff59149289e4bf8e9c4203ae8
35.156.223.41200 OK 2.6 kB URL HTTP/2 ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03498770253468638&nut&uu=e935c24ff59149289e4bf8e9c4203ae8
IP 35.156.223.41:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (2596), with no line terminators
Hash 8e97812ba27efa7bb725db3231058b5a
81e738349ae5b8f79e26f2b80d78f519b9430406
355f13798690abc1fff837e170876414156b5caea903ddf187411ea0b54ae46e
GET /adscale-ih/dum?tpid=101&sec=0&tpuid=03498770253468638&nut&uu=e935c24ff59149289e4bf8e9c4203ae8 HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://go.eu.bbelements.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:03:49 GMT
content-type: text/html;charset=ISO-8859-1
content-length: 2596
set-cookie: tu=4#3962593034#48~~465323~465323~1#101~03498770253468638~465323~0~0#38~~465323~465323~1#39~~465323~465323~1#57~~465323~465323~1#42~~465323~465323~1#60~~465323~465323~1#108~~465323~465323~1#63~~465323~465323~1; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
cct=1675163029013; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03498770253468638&nut&uu=d5e2cddf3eb94c72b9c56b52d4700248
35.156.223.41200 OK 2.6 kB URL HTTP/2 ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03498770253468638&nut&uu=d5e2cddf3eb94c72b9c56b52d4700248
IP 35.156.223.41:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (2596), with no line terminators
Hash 97582ea3247195de1ba77feb83fee2a4
ce492edac55a0c4791eb9f1f51b10a963f22dab6
8492b700ccd3bc8573e354c2de5929a514453ee62d1d1752b0e8b2c741c5a6e4
GET /adscale-ih/dum?tpid=101&sec=0&tpuid=03498770253468638&nut&uu=d5e2cddf3eb94c72b9c56b52d4700248 HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://advert.uloz.to/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:03:49 GMT
content-type: text/html;charset=ISO-8859-1
content-length: 2596
set-cookie: tu=4#3962593034#48~~465323~465323~1#101~03498770253468638~465323~0~0#38~~465323~465323~1#39~~465323~465323~1#57~~465323~465323~1#42~~465323~465323~1#60~~465323~465323~1#108~~465323~465323~1#63~~465323~465323~1; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
cct=1675163029015; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=63&tpuid=0
35.156.223.41200 OK 49 B URL HTTP/2 ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=63&tpuid=0
IP 35.156.223.41:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /sium/429371437437189942/1437437190794/0/img?tpid=63&tpuid=0 HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:03:49 GMT
content-type: image/gif
content-length: 49
set-cookie: tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
uu=030fe891e4d54e38858ec9ee670b3580; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
cct=1675163029205; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=63&tpuid=0
35.156.223.41200 OK 49 B URL HTTP/2 ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=63&tpuid=0
IP 35.156.223.41:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /sium/429371437437189942/1437437190794/0/img?tpid=63&tpuid=0 HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:03:49 GMT
content-type: image/gif
content-length: 49
set-cookie: tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
cct=1675163029241; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
uu=2df06cd16b9e4c308ac418aed8fdad71; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
match.adsrvr.org/track/cmf/generic?ttd_pid=adscale&ttd_tpi=1&uid=34e2648c25f94f36f2059038094b5cc9e0a3ed0507605648baa314855b0d596f&tpid=60&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F52d1dd358a85402898bbda2caaf1e6b0%2F1675163029013%2F171%2Fimg
35.71.131.137200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=adscale&ttd_tpi=1&uid=34e2648c25f94f36f2059038094b5cc9e0a3ed0507605648baa314855b0d596f&tpid=60&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F52d1dd358a85402898bbda2caaf1e6b0%2F1675163029013%2F171%2Fimg
IP 35.71.131.137:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=adscale&ttd_tpi=1&uid=34e2648c25f94f36f2059038094b5cc9e0a3ed0507605648baa314855b0d596f&tpid=60&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F52d1dd358a85402898bbda2caaf1e6b0%2F1675163029013%2F171%2Fimg HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:03:49 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
match.adsrvr.org/track/cmf/generic?ttd_pid=adscale&ttd_tpi=1&uid=cc6b53fce73625ef342922ae797c279357264b2ed6317cbdcc1435ab4215fab2&tpid=60&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F39363036c973419e857953175c512b5c%2F1675163029015%2F200%2Fimg
35.71.131.137200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=adscale&ttd_tpi=1&uid=cc6b53fce73625ef342922ae797c279357264b2ed6317cbdcc1435ab4215fab2&tpid=60&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F39363036c973419e857953175c512b5c%2F1675163029015%2F200%2Fimg
IP 35.71.131.137:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=adscale&ttd_tpi=1&uid=cc6b53fce73625ef342922ae797c279357264b2ed6317cbdcc1435ab4215fab2&tpid=60&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F39363036c973419e857953175c512b5c%2F1675163029015%2F200%2Fimg HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:03:49 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
tracking.m6r.eu/sync/adscaleRedirect?gdprFallback=true&uid=5d10585085d21ccaf12b1957c042badddeabbba5575cdabf5ec7808c2c46037c&tpid=48&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F52d1dd358a85402898bbda2caaf1e6b0%2F1675163029013%2F217%2Fimg
3.124.13.195302 Found 150 B URL HTTP/1.1 tracking.m6r.eu/sync/adscaleRedirect?gdprFallback=true&uid=5d10585085d21ccaf12b1957c042badddeabbba5575cdabf5ec7808c2c46037c&tpid=48&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F52d1dd358a85402898bbda2caaf1e6b0%2F1675163029013%2F217%2Fimg
IP 3.124.13.195:0
File type ASCII text, with no line terminators
Hash 0d9047685fa078d33c3fba7aec2c34ba
dc21084024fd65370adfcd38f5d74e71839b9919
64e48847cc71114e88f847b775147002ac8167bfd1648ad84d89212cd4aa9675
GET /sync/adscaleRedirect?gdprFallback=true&uid=5d10585085d21ccaf12b1957c042badddeabbba5575cdabf5ec7808c2c46037c&tpid=48&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F52d1dd358a85402898bbda2caaf1e6b0%2F1675163029013%2F217%2Fimg HTTP/1.1
Host: tracking.m6r.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Cookie: test=true; cct=1675163027045; id=d757ba7fd668cd5658ecb4faffec74ae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
content-length: 150
content-type: text/plain; charset=utf-8
date: Tue, 31 Jan 2023 11:03:49 GMT
location: https://ih.adscale.de/sium/52d1dd358a85402898bbda2caaf1e6b0/1675163029013/217/img?tpid=48&tpuid=d757ba7fd668cd5658ecb4faffec74ae
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
vary: Accept
ih.adscale.de/sium/52d1dd358a85402898bbda2caaf1e6b0/1675163029013/217/img?tpid=48&tpuid=d757ba7fd668cd5658ecb4faffec74ae
35.156.223.41200 OK 49 B URL HTTP/2 ih.adscale.de/sium/52d1dd358a85402898bbda2caaf1e6b0/1675163029013/217/img?tpid=48&tpuid=d757ba7fd668cd5658ecb4faffec74ae
IP 35.156.223.41:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /sium/52d1dd358a85402898bbda2caaf1e6b0/1675163029013/217/img?tpid=48&tpuid=d757ba7fd668cd5658ecb4faffec74ae HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:03:49 GMT
content-type: image/gif
content-length: 49
set-cookie: cct=1675163029326; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
uu=b051cf39a1674356ba55655703714aeb; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
tracking.m6r.eu/sync/adscaleRedirect?gdprFallback=true&uid=4c6799a96911defe0cdfad9aee2b9bbfeb4f55a09ae1dc031f46ca51a3731fc0&tpid=48&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F39363036c973419e857953175c512b5c%2F1675163029015%2F247%2Fimg
3.124.13.195302 Found 150 B URL HTTP/1.1 tracking.m6r.eu/sync/adscaleRedirect?gdprFallback=true&uid=4c6799a96911defe0cdfad9aee2b9bbfeb4f55a09ae1dc031f46ca51a3731fc0&tpid=48&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F39363036c973419e857953175c512b5c%2F1675163029015%2F247%2Fimg
IP 3.124.13.195:0
File type ASCII text, with no line terminators
Hash 84d79199beb2d1a81b818e8cf00ee0c3
1e95688bea0bf60e5e98ff1bb6aae587263c36e4
2305df3cc465ea5e8e6fab22c8491c81a679528c519e283f3c15c927c2851e11
GET /sync/adscaleRedirect?gdprFallback=true&uid=4c6799a96911defe0cdfad9aee2b9bbfeb4f55a09ae1dc031f46ca51a3731fc0&tpid=48&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F39363036c973419e857953175c512b5c%2F1675163029015%2F247%2Fimg HTTP/1.1
Host: tracking.m6r.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Cookie: test=true; cct=1675163027045; id=d757ba7fd668cd5658ecb4faffec74ae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
content-length: 150
content-type: text/plain; charset=utf-8
date: Tue, 31 Jan 2023 11:03:49 GMT
location: https://ih.adscale.de/sium/39363036c973419e857953175c512b5c/1675163029015/247/img?tpid=48&tpuid=d757ba7fd668cd5658ecb4faffec74ae
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
vary: Accept
track.adform.net/serving/cookie/match/?party=9&uid=a0ed2f227fd40bf3e8302df651b2f000676da6539550c84123467548478d197c&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F52d1dd358a85402898bbda2caaf1e6b0%2F1675163029013%2F288%2Fimg
37.157.5.142302 Found 0 B URL HTTP/2 track.adform.net/serving/cookie/match/?party=9&uid=a0ed2f227fd40bf3e8302df651b2f000676da6539550c84123467548478d197c&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F52d1dd358a85402898bbda2caaf1e6b0%2F1675163029013%2F288%2Fimg
IP 37.157.5.142:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /serving/cookie/match/?party=9&uid=a0ed2f227fd40bf3e8302df651b2f000676da6539550c84123467548478d197c&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F52d1dd358a85402898bbda2caaf1e6b0%2F1675163029013%2F288%2Fimg HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Tue, 31 Jan 2023 11:03:49 GMT
content-length: 0
location: https://track.adform.net/serving/cookie/match/?CC=1&party=9&uid=a0ed2f227fd40bf3e8302df651b2f000676da6539550c84123467548478d197c&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F52d1dd358a85402898bbda2caaf1e6b0%2F1675163029013%2F288%2Fimg
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
set-cookie: C=1; expires=Tue, 28 Feb 2023 11:03:49 GMT; domain=adform.net; path=/
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ih.adscale.de/sium/39363036c973419e857953175c512b5c/1675163029015/247/img?tpid=48&tpuid=d757ba7fd668cd5658ecb4faffec74ae
35.156.223.41200 OK 49 B URL HTTP/2 ih.adscale.de/sium/39363036c973419e857953175c512b5c/1675163029015/247/img?tpid=48&tpuid=d757ba7fd668cd5658ecb4faffec74ae
IP 35.156.223.41:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /sium/39363036c973419e857953175c512b5c/1675163029015/247/img?tpid=48&tpuid=d757ba7fd668cd5658ecb4faffec74ae HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:03:49 GMT
content-type: image/gif
content-length: 49
set-cookie: uu=581c17c65e8742cd96231fcf1a1e94c5; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
cct=1675163029374; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
track.adform.net/serving/cookie/match/?party=9&uid=7152e7b9570bdbcf9ea15b9617cc9263a2e3f90843e7676e596ba70ccef629ea&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F39363036c973419e857953175c512b5c%2F1675163029015%2F333%2Fimg
37.157.5.142302 Found 0 B URL HTTP/2 track.adform.net/serving/cookie/match/?party=9&uid=7152e7b9570bdbcf9ea15b9617cc9263a2e3f90843e7676e596ba70ccef629ea&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F39363036c973419e857953175c512b5c%2F1675163029015%2F333%2Fimg
IP 37.157.5.142:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /serving/cookie/match/?party=9&uid=7152e7b9570bdbcf9ea15b9617cc9263a2e3f90843e7676e596ba70ccef629ea&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F39363036c973419e857953175c512b5c%2F1675163029015%2F333%2Fimg HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Tue, 31 Jan 2023 11:03:49 GMT
content-length: 0
location: https://track.adform.net/serving/cookie/match/?CC=1&party=9&uid=7152e7b9570bdbcf9ea15b9617cc9263a2e3f90843e7676e596ba70ccef629ea&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F39363036c973419e857953175c512b5c%2F1675163029015%2F333%2Fimg
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
set-cookie: C=1; expires=Tue, 28 Feb 2023 11:03:49 GMT; domain=adform.net; path=/
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
track.adform.net/serving/cookie/match/?CC=1&party=9&uid=a0ed2f227fd40bf3e8302df651b2f000676da6539550c84123467548478d197c&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F52d1dd358a85402898bbda2caaf1e6b0%2F1675163029013%2F288%2Fimg
37.157.5.142200 OK 35 B URL HTTP/2 track.adform.net/serving/cookie/match/?CC=1&party=9&uid=a0ed2f227fd40bf3e8302df651b2f000676da6539550c84123467548478d197c&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F52d1dd358a85402898bbda2caaf1e6b0%2F1675163029013%2F288%2Fimg
IP 37.157.5.142:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /serving/cookie/match/?CC=1&party=9&uid=a0ed2f227fd40bf3e8302df651b2f000676da6539550c84123467548478d197c&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F52d1dd358a85402898bbda2caaf1e6b0%2F1675163029013%2F288%2Fimg HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:49 GMT
content-type: image/gif
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
track.adform.net/serving/cookie/match/?CC=1&party=9&uid=7152e7b9570bdbcf9ea15b9617cc9263a2e3f90843e7676e596ba70ccef629ea&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F39363036c973419e857953175c512b5c%2F1675163029015%2F333%2Fimg
37.157.5.142200 OK 35 B URL HTTP/2 track.adform.net/serving/cookie/match/?CC=1&party=9&uid=7152e7b9570bdbcf9ea15b9617cc9263a2e3f90843e7676e596ba70ccef629ea&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F39363036c973419e857953175c512b5c%2F1675163029015%2F333%2Fimg
IP 37.157.5.142:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /serving/cookie/match/?CC=1&party=9&uid=7152e7b9570bdbcf9ea15b9617cc9263a2e3f90843e7676e596ba70ccef629ea&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F39363036c973419e857953175c512b5c%2F1675163029015%2F333%2Fimg HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:49 GMT
content-type: image/gif
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=39&tpuid=cb5663d8-f595-4d00-b56c-cc8ef9a2b177
35.156.223.41200 OK 49 B URL HTTP/2 ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=39&tpuid=cb5663d8-f595-4d00-b56c-cc8ef9a2b177
IP 35.156.223.41:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /sium/429371437437189942/1437437190794/0/img?tpid=39&tpuid=cb5663d8-f595-4d00-b56c-cc8ef9a2b177 HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:03:49 GMT
content-type: image/gif
content-length: 49
set-cookie: tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
cct=1675163029465; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
uu=4d963e8478af49889ccfc5dbb6f18c56; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=39&tpuid=fb7e63d8-f595-4e00-807f-c087d8e1bc2c
35.156.223.41200 OK 49 B URL HTTP/2 ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=39&tpuid=fb7e63d8-f595-4e00-807f-c087d8e1bc2c
IP 35.156.223.41:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /sium/429371437437189942/1437437190794/0/img?tpid=39&tpuid=fb7e63d8-f595-4e00-807f-c087d8e1bc2c HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:03:49 GMT
content-type: image/gif
content-length: 49
set-cookie: uu=0a1cef4affe04db19181821b65d05069; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
cct=1675163029497; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
x.bidswitch.net/sync?ssp=adscale&uid=a01e4902d4a314531e32a8ddf53776ebdccd0c9ec1590cbfa5c93b31ccbc6b31&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F52d1dd358a85402898bbda2caaf1e6b0%2F1675163029013%2F488%2Fimg
3.124.23.99302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?ssp=adscale&uid=a01e4902d4a314531e32a8ddf53776ebdccd0c9ec1590cbfa5c93b31ccbc6b31&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F52d1dd358a85402898bbda2caaf1e6b0%2F1675163029013%2F488%2Fimg
IP 3.124.23.99:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?ssp=adscale&uid=a01e4902d4a314531e32a8ddf53776ebdccd0c9ec1590cbfa5c93b31ccbc6b31&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F52d1dd358a85402898bbda2caaf1e6b0%2F1675163029013%2F488%2Fimg HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 31 Jan 2023 11:03:49 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?ssp=adscale&uid=a01e4902d4a314531e32a8ddf53776ebdccd0c9ec1590cbfa5c93b31ccbc6b31&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F52d1dd358a85402898bbda2caaf1e6b0%2F1675163029013%2F488%2Fimg
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=159af53f-e3a1-4054-ac64-b2847ee6e89a; path=/; expires=Wed, 31-Jan-2024 11:03:49 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675163029; path=/; expires=Wed, 31-Jan-2024 11:03:49 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1675163029; path=/; expires=Wed, 31-Jan-2024 11:03:49 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675163029; path=/; expires=Wed, 31-Jan-2024 11:03:49 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
x.bidswitch.net/sync?ssp=adscale&uid=e80606fafe93d1c76b60287bae6940cd33515580cb0cee4098d5bdcede249cd1&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F39363036c973419e857953175c512b5c%2F1675163029015%2F520%2Fimg
3.124.23.99302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?ssp=adscale&uid=e80606fafe93d1c76b60287bae6940cd33515580cb0cee4098d5bdcede249cd1&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F39363036c973419e857953175c512b5c%2F1675163029015%2F520%2Fimg
IP 3.124.23.99:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?ssp=adscale&uid=e80606fafe93d1c76b60287bae6940cd33515580cb0cee4098d5bdcede249cd1&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F39363036c973419e857953175c512b5c%2F1675163029015%2F520%2Fimg HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 31 Jan 2023 11:03:49 GMT
content-length: 0
cache-control: no-cache, no-store, must-revalidate
location: //ih.adscale.de/adscale-ih/sium?tpid=57&tpuid=0&gdpr=&gdpr_consent=
X-Firefox-Spdy: h2
x.bidswitch.net/ul_cb/sync?ssp=adscale&uid=a01e4902d4a314531e32a8ddf53776ebdccd0c9ec1590cbfa5c93b31ccbc6b31&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F52d1dd358a85402898bbda2caaf1e6b0%2F1675163029013%2F488%2Fimg
3.124.23.99302 Found 0 B URL HTTP/2 x.bidswitch.net/ul_cb/sync?ssp=adscale&uid=a01e4902d4a314531e32a8ddf53776ebdccd0c9ec1590cbfa5c93b31ccbc6b31&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F52d1dd358a85402898bbda2caaf1e6b0%2F1675163029013%2F488%2Fimg
IP 3.124.23.99:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ul_cb/sync?ssp=adscale&uid=a01e4902d4a314531e32a8ddf53776ebdccd0c9ec1590cbfa5c93b31ccbc6b31&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F52d1dd358a85402898bbda2caaf1e6b0%2F1675163029013%2F488%2Fimg HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 31 Jan 2023 11:03:49 GMT
content-length: 0
cache-control: no-cache, no-store, must-revalidate
location: //ih.adscale.de/adscale-ih/sium?tpid=57&tpuid=0&gdpr=&gdpr_consent=
X-Firefox-Spdy: h2
ih.adscale.de/adscale-ih/sium?tpid=57&tpuid=0&gdpr=&gdpr_consent=
35.156.223.41200 OK 49 B URL HTTP/2 ih.adscale.de/adscale-ih/sium?tpid=57&tpuid=0&gdpr=&gdpr_consent=
IP 35.156.223.41:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /adscale-ih/sium?tpid=57&tpuid=0&gdpr=&gdpr_consent= HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:03:49 GMT
content-type: image/gif
content-length: 49
set-cookie: uu=b53bfb078a774307b8410911da4e2469; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
cct=1675163029638; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
sync.mathtag.com/sync/img?mt_exid=26&redir=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D108%26tpuid%3D%5BMM_UUID%5D&uid=31789cd07f6a559fad9f0dd1d989dffc56d64cedb70c397c98a3bd6fe523597f&tpid=108&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F39363036c973419e857953175c512b5c%2F1675163029015%2F597%2Fimg
185.29.134.248302 Moved Temporarily 0 B URL HTTP/1.1 sync.mathtag.com/sync/img?mt_exid=26&redir=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D108%26tpuid%3D%5BMM_UUID%5D&uid=31789cd07f6a559fad9f0dd1d989dffc56d64cedb70c397c98a3bd6fe523597f&tpid=108&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F39363036c973419e857953175c512b5c%2F1675163029015%2F597%2Fimg
IP 185.29.134.248:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/img?mt_exid=26&redir=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D108%26tpuid%3D%5BMM_UUID%5D&uid=31789cd07f6a559fad9f0dd1d989dffc56d64cedb70c397c98a3bd6fe523597f&tpid=108&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F39363036c973419e857953175c512b5c%2F1675163029015%2F597%2Fimg HTTP/1.1
Host: sync.mathtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Tue, 31 Jan 2023 11:03:49 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=360
Access-Control-Allow-Origin: *
Server: MT3 404 ce67235 master cdg-pixel-x10 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: uuid=c72463d8-f595-4400-afe1-4631655fb012; domain=.mathtag.com; path=/; expires=Wed, 28-Feb-2024 11:03:49 GMT; SameSite=None; Secure
location: https://ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=108&tpuid=c72463d8-f595-4400-afe1-4631655fb012
Expires: Tue, 31 Jan 2023 11:03:48 GMT
ih.adscale.de/adscale-ih/sium?tpid=57&tpuid=0&gdpr=&gdpr_consent=
35.156.223.41200 OK 49 B URL HTTP/2 ih.adscale.de/adscale-ih/sium?tpid=57&tpuid=0&gdpr=&gdpr_consent=
IP 35.156.223.41:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /adscale-ih/sium?tpid=57&tpuid=0&gdpr=&gdpr_consent= HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:03:49 GMT
content-type: image/gif
content-length: 49
set-cookie: cct=1675163029672; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
uu=a6bcefdf72ce4886929b683e63a09c05; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=108&tpuid=c72463d8-f595-4400-afe1-4631655fb012
35.156.223.41200 OK 49 B URL HTTP/2 ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=108&tpuid=c72463d8-f595-4400-afe1-4631655fb012
IP 35.156.223.41:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /sium/429371437437189942/1437437190794/0/img?tpid=108&tpuid=c72463d8-f595-4400-afe1-4631655fb012 HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:03:49 GMT
content-type: image/gif
content-length: 49
set-cookie: tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
cct=1675163029735; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
uu=dd7de2b308ea4b808654ef31c83fd158; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
sync.mathtag.com/sync/img?mt_exid=26&redir=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D108%26tpuid%3D%5BMM_UUID%5D&uid=da1e269c9a961af7064d0cf9a3e258ff0a0296d3f0284da57596a043801cf106&tpid=108&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F52d1dd358a85402898bbda2caaf1e6b0%2F1675163029013%2F659%2Fimg
185.29.134.248302 Moved Temporarily 0 B URL HTTP/1.1 sync.mathtag.com/sync/img?mt_exid=26&redir=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D108%26tpuid%3D%5BMM_UUID%5D&uid=da1e269c9a961af7064d0cf9a3e258ff0a0296d3f0284da57596a043801cf106&tpid=108&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F52d1dd358a85402898bbda2caaf1e6b0%2F1675163029013%2F659%2Fimg
IP 185.29.134.248:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/img?mt_exid=26&redir=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D108%26tpuid%3D%5BMM_UUID%5D&uid=da1e269c9a961af7064d0cf9a3e258ff0a0296d3f0284da57596a043801cf106&tpid=108&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F52d1dd358a85402898bbda2caaf1e6b0%2F1675163029013%2F659%2Fimg HTTP/1.1
Host: sync.mathtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Tue, 31 Jan 2023 11:03:49 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=360
Access-Control-Allow-Origin: *
Server: MT3 404 ce67235 master cdg-pixel-x27 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: uuid=bd0b63d8-f595-4500-8a42-770a6c618181; domain=.mathtag.com; path=/; expires=Wed, 28-Feb-2024 11:03:49 GMT; SameSite=None; Secure
location: https://ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=108&tpuid=bd0b63d8-f595-4500-8a42-770a6c618181
Expires: Tue, 31 Jan 2023 11:03:48 GMT
ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=108&tpuid=bd0b63d8-f595-4500-8a42-770a6c618181
35.156.223.41200 OK 49 B URL HTTP/2 ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=108&tpuid=bd0b63d8-f595-4500-8a42-770a6c618181
IP 35.156.223.41:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /sium/429371437437189942/1437437190794/0/img?tpid=108&tpuid=bd0b63d8-f595-4500-8a42-770a6c618181 HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:03:49 GMT
content-type: image/gif
content-length: 49
set-cookie: uu=79b4f17b9bf64d7ba4570425fde753e3; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
cct=1675163029786; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
static.uloz.to/javascript/darkMode.js?v=3.300.358
93.99.2.84200 OK 0 B URL HTTP/2 static.uloz.to/javascript/darkMode.js?v=3.300.358
IP 93.99.2.84:0
ASN #16019 Vodafone Czech Republic a.s.
GET /javascript/darkMode.js?v=3.300.358 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Cookie: ULOSESSID=lrv6h1ad7hj8vle61hg3mk759q; uloztoid=2067298116
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:44 GMT
content-type: application/x-javascript
last-modified: Thu, 12 Jan 2023 09:31:42 GMT
etag: W/"63bfd37e-9c2"
expires: Tue, 31 Jan 2023 23:03:44 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
static.uloz.to/javascript/ulozto.min.js?v=3.300.358
93.99.2.84200 OK 0 B URL HTTP/2 static.uloz.to/javascript/ulozto.min.js?v=3.300.358
IP 93.99.2.84:0
ASN #16019 Vodafone Czech Republic a.s.
GET /javascript/ulozto.min.js?v=3.300.358 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Cookie: ULOSESSID=lrv6h1ad7hj8vle61hg3mk759q; uloztoid=2067298116
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:44 GMT
content-type: application/x-javascript
last-modified: Wed, 18 Jan 2023 08:22:39 GMT
etag: W/"63c7ac4f-46daf"
expires: Tue, 31 Jan 2023 23:03:44 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
bbnaut.ibillboard.com/g/co
194.213.62.34200 OK 0 B URL HTTP/2 bbnaut.ibillboard.com/g/co
IP 194.213.62.34:0
ASN #13036 T-Mobile Czech Republic a.s.
GET /g/co HTTP/1.1
Host: bbnaut.ibillboard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:45 GMT
content-type: text/javascript
expires: Wed, 01 Feb 2023 11:03:45 GMT
cache-control: max-age=86400, private
X-Firefox-Spdy: h2
bbnaut.ibillboard.com/match/AdScale?partneruid=4ef94eed20614cb387cc44fa115d898a
194.213.62.34200 OK 0 B URL HTTP/2 bbnaut.ibillboard.com/match/AdScale?partneruid=4ef94eed20614cb387cc44fa115d898a
IP 194.213.62.34:0
ASN #13036 T-Mobile Czech Republic a.s.
GET /match/AdScale?partneruid=4ef94eed20614cb387cc44fa115d898a HTTP/1.1
Host: bbnaut.ibillboard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:49 GMT
content-type: image/gif
cache-control: private, max-age=86400
access-control-allow-credentials: true
X-Firefox-Spdy: h2
megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/ad19.html
77.48.29.194200 OK 0 B URL HTTP/2 megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/ad19.html
IP 77.48.29.194:0
ASN #16019 Vodafone Czech Republic a.s.
GET /ulozto_ads/ulozto_ads_5/ads/ad19.html HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advert.uloz.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:04:51 GMT
content-type: text/html
last-modified: Tue, 31 Jan 2023 10:39:01 GMT
cache-control: max-age=86400
expires: Wed, 01 Feb 2023 11:04:51 GMT
etag: W/"63d8efc5-2f34"
content-encoding: br
X-Firefox-Spdy: h2
track.adform.net/serving/unload/?version=15&unload=-5932061713061764574@@12487188,2955272137632706810,100|4888|0|789|436|0|0|0|0||312|0|||||1|0|0|OyFmELpARjmjXuUM8tfH4hazj2RYsgytiwNRt6eOXPZSE4N4DfChFAJ1gDRGwv2I0|||00|0|0
37.157.5.142200 OK 0 B URL HTTP/2 track.adform.net/serving/unload/?version=15&unload=-5932061713061764574@@12487188,2955272137632706810,100|4888|0|789|436|0|0|0|0||312|0|||||1|0|0|OyFmELpARjmjXuUM8tfH4hazj2RYsgytiwNRt6eOXPZSE4N4DfChFAJ1gDRGwv2I0|||00|0|0
IP 37.157.5.142:0
POST /serving/unload/?version=15&unload=-5932061713061764574@@12487188,2955272137632706810,100|4888|0|789|436|0|0|0|0||312|0|||||1|0|0|OyFmELpARjmjXuUM8tfH4hazj2RYsgytiwNRt6eOXPZSE4N4DfChFAJ1gDRGwv2I0|||00|0|0 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://uloz.to
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:51 GMT
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: https://uloz.to
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Content-Type, Cache-Control, Accept-Encoding, X-Requested-With
access-control-max-age: 86400
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
static.uloz.to/ul3/css/style-extra-file-search.css?v=3.300.358
93.99.2.84200 OK 0 B URL HTTP/2 static.uloz.to/ul3/css/style-extra-file-search.css?v=3.300.358
IP 93.99.2.84:0
ASN #16019 Vodafone Czech Republic a.s.
GET /ul3/css/style-extra-file-search.css?v=3.300.358 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Cookie: ULOSESSID=lrv6h1ad7hj8vle61hg3mk759q; uloztoid=2067298116
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:44 GMT
content-type: text/css
last-modified: Wed, 18 Jan 2023 08:22:39 GMT
etag: W/"63c7ac4f-13419"
expires: Tue, 31 Jan 2023 23:03:44 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
static.uloz.to/ul3/css/style-global.css?v=3.300.358
93.99.2.84200 OK 0 B URL HTTP/2 static.uloz.to/ul3/css/style-global.css?v=3.300.358
IP 93.99.2.84:0
ASN #16019 Vodafone Czech Republic a.s.
GET /ul3/css/style-global.css?v=3.300.358 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Cookie: ULOSESSID=lrv6h1ad7hj8vle61hg3mk759q; uloztoid=2067298116
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:43 GMT
content-type: text/css
last-modified: Wed, 18 Jan 2023 08:22:39 GMT
etag: W/"63c7ac4f-1f92a"
expires: Tue, 31 Jan 2023 23:03:43 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
static.uloz.to/javascript/advertFrame.min.js?v=3.300.236
93.99.2.84200 OK 0 B URL HTTP/2 static.uloz.to/javascript/advertFrame.min.js?v=3.300.236
IP 93.99.2.84:0
ASN #16019 Vodafone Czech Republic a.s.
GET /javascript/advertFrame.min.js?v=3.300.236 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advert.uloz.to/
Cookie: ULOSESSID=lrv6h1ad7hj8vle61hg3mk759q; uloztoid=2067298116; _ga_L4S9E2Y7WN=GS1.1.1675163041.1.0.1675163041.0.0.0; _ga=GA1.2.1031170634.1675163041; _gid=GA1.2.1989338495.1675163042; uloztoid2=2067298116; _dc_gtm_UA-205967-8=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:48 GMT
content-type: application/x-javascript
last-modified: Wed, 18 Jan 2023 08:22:39 GMT
etag: W/"63c7ac4f-1ab38"
expires: Tue, 31 Jan 2023 23:03:48 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
track.adform.net/csimpr/?bn=12487188&csi=a-s4C7uqzaZBm27KJULuT2r7tyW3lQC-CRdhoyXENW3bNUjYKkRX5toj5KtB9xV1mkJ8nxkCCZCBWV5VF9ZsaLyOpNDfIsLF0
37.157.5.142200 OK 0 B URL HTTP/2 track.adform.net/csimpr/?bn=12487188&csi=a-s4C7uqzaZBm27KJULuT2r7tyW3lQC-CRdhoyXENW3bNUjYKkRX5toj5KtB9xV1mkJ8nxkCCZCBWV5VF9ZsaLyOpNDfIsLF0
IP 37.157.5.142:0
POST /csimpr/?bn=12487188&csi=a-s4C7uqzaZBm27KJULuT2r7tyW3lQC-CRdhoyXENW3bNUjYKkRX5toj5KtB9xV1mkJ8nxkCCZCBWV5VF9ZsaLyOpNDfIsLF0 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://uloz.to
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:46 GMT
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: https://uloz.to
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Content-Type, Cache-Control, Accept-Encoding, X-Requested-With
access-control-max-age: 86400
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
uloz.to/file/T185nTsvs3BM/die-hit-giganten-2011-best-of-80s-rar
93.99.2.80200 OK 0 B URL HTTP/2 uloz.to/file/T185nTsvs3BM/die-hit-giganten-2011-best-of-80s-rar
IP 93.99.2.80:0
ASN #16019 Vodafone Czech Republic a.s.
GET /file/T185nTsvs3BM/die-hit-giganten-2011-best-of-80s-rar HTTP/1.1
Host: uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:43 GMT
content-type: text/html; charset=utf-8
x-frame-options: SAMEORIGIN
set-cookie: _nss=1; path=/; secure; HttpOnly; SameSite=Strict
ULOSESSID=lrv6h1ad7hj8vle61hg3mk759q; expires=Tue, 14-Feb-2023 11:03:43 GMT; Max-Age=1209600; path=/; domain=.uloz.to; secure; HttpOnly; SameSite=Lax
uloztoid=2067298116; expires=Wed, 31-Jan-2024 11:03:43 GMT; Max-Age=31536000; path=/; domain=uloz.to; secure; SameSite=None
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: X-Requested-With
x-node-name: ulozto1
content-encoding: gzip
X-Firefox-Spdy: h2
static.uloz.to/javascript/lib/modernizr.js?v=3.300.358
93.99.2.84200 OK 0 B URL HTTP/2 static.uloz.to/javascript/lib/modernizr.js?v=3.300.358
IP 93.99.2.84:0
ASN #16019 Vodafone Czech Republic a.s.
GET /javascript/lib/modernizr.js?v=3.300.358 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Cookie: ULOSESSID=lrv6h1ad7hj8vle61hg3mk759q; uloztoid=2067298116
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:44 GMT
content-type: application/x-javascript
last-modified: Thu, 12 Jan 2023 09:31:42 GMT
etag: W/"63bfd37e-d52"
expires: Tue, 31 Jan 2023 23:03:44 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
s1.adform.net/stoat/626/s1.adform.net/load/v/0.0.226/e/agBBwCDA/i/vCAv.IAAAAAUAA/r:AdConstructor:contents/ImageTag:types/Standard
37.157.2.248200 OK 0 B URL HTTP/2 s1.adform.net/stoat/626/s1.adform.net/load/v/0.0.226/e/agBBwCDA/i/vCAv.IAAAAAUAA/r:AdConstructor:contents/ImageTag:types/Standard
IP 37.157.2.248:0
GET /stoat/626/s1.adform.net/load/v/0.0.226/e/agBBwCDA/i/vCAv.IAAAAAUAA/r:AdConstructor:contents/ImageTag:types/Standard HTTP/1.1
Host: s1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:45 GMT
content-type: text/javascript
vary: Accept-Encoding
access-control-allow-origin: *
last-modified: Wed, 21 Dec 2022 11:59:41 GMT
cache-control: public, max-age=100000
expires: Wed, 01 Feb 2023 14:23:37 GMT
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
bbnaut.bbelements.com/s/co/BBID-01-03498770254802748-16828992?gdpr=1&gdpr_consent=null
62.209.227.211200 OK 0 B URL HTTP/2 bbnaut.bbelements.com/s/co/BBID-01-03498770254802748-16828992?gdpr=1&gdpr_consent=null
IP 62.209.227.211:0
ASN #13036 T-Mobile Czech Republic a.s.
GET /s/co/BBID-01-03498770254802748-16828992?gdpr=1&gdpr_consent=null HTTP/1.1
Host: bbnaut.bbelements.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:45 GMT
content-type: text/html
cache-control: private, max-age=3600
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
static.uloz.to/ul3/css/style-extra-file-detail.css?v=3.300.358
93.99.2.84200 OK 0 B URL HTTP/2 static.uloz.to/ul3/css/style-extra-file-detail.css?v=3.300.358
IP 93.99.2.84:0
ASN #16019 Vodafone Czech Republic a.s.
GET /ul3/css/style-extra-file-detail.css?v=3.300.358 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Cookie: ULOSESSID=lrv6h1ad7hj8vle61hg3mk759q; uloztoid=2067298116
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:44 GMT
content-type: text/css
last-modified: Wed, 18 Jan 2023 08:22:39 GMT
etag: W/"63c7ac4f-3d15"
expires: Tue, 31 Jan 2023 23:03:44 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
bbnaut.ibillboard.com/initidmatch?force=1&gdpr=1&gdpr_consent=null
194.213.62.34200 OK 0 B URL HTTP/2 bbnaut.ibillboard.com/initidmatch?force=1&gdpr=1&gdpr_consent=null
IP 194.213.62.34:0
ASN #13036 T-Mobile Czech Republic a.s.
GET /initidmatch?force=1&gdpr=1&gdpr_consent=null HTTP/1.1
Host: bbnaut.ibillboard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:45 GMT
content-type: text/javascript
cache-control: private, max-age=3600
access-control-allow-credentials: true
X-Firefox-Spdy: h2
bbnaut.ibillboard.com/s/co/BBID-01-03498770254802748-16828992?gdpr=1&gdpr_consent=null
194.213.62.34200 OK 0 B URL HTTP/2 bbnaut.ibillboard.com/s/co/BBID-01-03498770254802748-16828992?gdpr=1&gdpr_consent=null
IP 194.213.62.34:0
ASN #13036 T-Mobile Czech Republic a.s.
GET /s/co/BBID-01-03498770254802748-16828992?gdpr=1&gdpr_consent=null HTTP/1.1
Host: bbnaut.ibillboard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://uloz.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:45 GMT
content-type: text/html
cache-control: private, max-age=3600
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/style.css
77.48.29.194200 OK 0 B URL HTTP/2 megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/style.css
IP 77.48.29.194:0
ASN #16019 Vodafone Czech Republic a.s.
GET /ulozto_ads/ulozto_ads_5/ads/style.css HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_5/ads/ad19.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:04:51 GMT
content-type: text/css
last-modified: Fri, 12 Feb 2021 05:02:24 GMT
cache-control: max-age=604800
expires: Tue, 07 Feb 2023 11:04:51 GMT
etag: W/"60260be0-555"
content-encoding: br
X-Firefox-Spdy: h2
bbnaut.ibillboard.com/match/AdScale?partneruid=71c798a55fa94988af6a16309b49a858
194.213.62.34200 OK 0 B URL HTTP/2 bbnaut.ibillboard.com/match/AdScale?partneruid=71c798a55fa94988af6a16309b49a858
IP 194.213.62.34:0
ASN #13036 T-Mobile Czech Republic a.s.
GET /match/AdScale?partneruid=71c798a55fa94988af6a16309b49a858 HTTP/1.1
Host: bbnaut.ibillboard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:49 GMT
content-type: image/gif
cache-control: private, max-age=86400
access-control-allow-credentials: true
X-Firefox-Spdy: h2
uloz.to/announcement/view?id=379&source=news
93.99.2.80200 OK 0 B URL HTTP/2 uloz.to/announcement/view?id=379&source=news
IP 93.99.2.80:0
ASN #16019 Vodafone Czech Republic a.s.
GET /announcement/view?id=379&source=news HTTP/1.1
Host: uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://uloz.to/file/T185nTsvs3BM/die-hit-giganten-2011-best-of-80s-rar
Cookie: _nss=1; ULOSESSID=lrv6h1ad7hj8vle61hg3mk759q; uloztoid=2067298116; skin-switcher-selection=light; abtest=0; _ga_L4S9E2Y7WN=GS1.1.1675163041.1.0.1675163041.0.0.0; _ga=GA1.1.1031170634.1675163041; _pk_id.1.6747=873fce5c2da73b8a.1675163041.; _pk_ses.1.6747=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:03:45 GMT
content-type: application/json; charset=utf-8
x-frame-options: SAMEORIGIN
set-cookie: _nss=1; path=/; secure; HttpOnly; SameSite=Strict
ULOSESSID=lrv6h1ad7hj8vle61hg3mk759q; expires=Tue, 14-Feb-2023 11:03:45 GMT; Max-Age=1209600; path=/; domain=.uloz.to; secure; HttpOnly; SameSite=Lax
uloztoid2=2067298116; expires=Wed, 31-Jan-2024 11:03:45 GMT; Max-Age=31536000; path=/; domain=uloz.to; secure; SameSite=None
uloztoid=2067298116; expires=Wed, 31-Jan-2024 11:03:45 GMT; Max-Age=31536000; path=/; domain=uloz.to; secure; SameSite=None
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: X-Requested-With
x-node-name: ulozto3
content-encoding: gzip
X-Firefox-Spdy: h2