ulozto.cz/file-tracking/6cee961211e77f088dbdc417fe2d8d489066bacfaf83df7c02063b3de03275cd08adb6d45ac81c99a8a6728562f11bac?q=smash++hits+-+1988.rar
301 Moved Permanently 162 B URL HTTP/1.1 ulozto.cz/file-tracking/6cee961211e77f088dbdc417fe2d8d489066bacfaf83df7c02063b3de03275cd08adb6d45ac81c99a8a6728562f11bac?q=smash++hits+-+1988.rar
IP
ASN #16019 Vodafone Czech Republic a.s.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /file-tracking/6cee961211e77f088dbdc417fe2d8d489066bacfaf83df7c02063b3de03275cd08adb6d45ac81c99a8a6728562f11bac?q=smash++hits+-+1988.rar HTTP/1.1
Host: ulozto.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
server: nginx
date: Fri, 30 Dec 2022 04:10:04 GMT
content-type: text/html
content-length: 162
location: https://ulozto.cz/file-tracking/6cee961211e77f088dbdc417fe2d8d489066bacfaf83df7c02063b3de03275cd08adb6d45ac81c99a8a6728562f11bac?q=smash++hits+-+1988.rar
x-node-name: ulozto8
connection: close
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e717435470c9f4f06b174d7100c6a98f
292150251495b243c384e0c676a258597ba7f4d8
91ce8257662cb8cea9cc3c74cda1d95dba421daa466b0ac231fa433e0c58e6c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "91CE8257662CB8CEA9CC3C74CDA1D95DBA421DAA466B0AC231FA433E0C58E6C6"
Last-Modified: Tue, 27 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17777
Expires: Fri, 30 Dec 2022 09:06:21 GMT
Date: Fri, 30 Dec 2022 04:10:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 259d3eba2ac4ea32f0410a59bd01c18a
ab02cd69e6c04e3842ad1778fb0daa6d0e86fddc
0d6ec941dac6d97a0b24c0cf00a5642a4edda68ae5ec8b3019d1ec05f40d2281
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0D6EC941DAC6D97A0B24C0CF00A5642A4EDDA68AE5EC8B3019D1EC05F40D2281"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4833
Expires: Fri, 30 Dec 2022 05:30:37 GMT
Date: Fri, 30 Dec 2022 04:10:04 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 30 Dec 2022 03:35:31 GMT
content-type: application/json
age: 2073
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 07e619a5a572fa9bcb54fa70de27f0d4
c0499dcc7551831f517f189465812859d0f48ced
2213c856ce4dd64ebe28e4deff34d449b2c08be98565c0405427453ae948fa74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2213C856CE4DD64EBE28E4DEFF34D449B2C08BE98565C0405427453AE948FA74"
Last-Modified: Tue, 27 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3184
Expires: Fri, 30 Dec 2022 05:03:08 GMT
Date: Fri, 30 Dec 2022 04:10:04 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: zo+i6Um64N3/VvB1P/xfdr5Fpm7kocPRM1z3o8iYO9Qk38EjAizlRFcPZFK1pSgQB6T8KPId37M=
x-amz-request-id: XR705JND46YV9Z9C
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 30 Dec 2022 03:56:52 GMT
age: 792
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 858c429a32ebf0333e59fc0119d74149
23afe48a020951f7b5884eff1bb716acdf5cf96a
ade6c05c3b8f938bc16125dcddcfda71987a3d7f773ae4a48a739939e3474bd2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ADE6C05C3B8F938BC16125DCDDCFDA71987A3D7F773AE4A48A739939E3474BD2"
Last-Modified: Tue, 27 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14886
Expires: Fri, 30 Dec 2022 08:18:10 GMT
Date: Fri, 30 Dec 2022 04:10:04 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:04 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Alert, ETag, Content-Type, Last-Modified, Cache-Control, Expires, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 30 Dec 2022 03:33:30 GMT
age: 2195
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 0a08dc71eb7ba3512abb4d29505eb034
e66404bda80b355bae30b0d4db3daa193a6e4276
357891f99263d30eaded85985217d9627cd60369ee8d01a7eacdb2d0f2d8b2dd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3997
Cache-Control: max-age=108199
Content-Type: application/ocsp-response
Date: Fri, 30 Dec 2022 04:10:05 GMT
Etag: "63ad58a7-1d7"
Expires: Sat, 31 Dec 2022 10:13:24 GMT
Last-Modified: Thu, 29 Dec 2022 09:06:47 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b5f5be1a032acd27a7c36172254be2df
de7c6c71c77ea5c676a7a88e8776ee36660df462
1ec163cda3ea9c354c69ef56d8e4b9ad1826d66699ac1dffb242f310279e6027
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1EC163CDA3EA9C354C69EF56D8E4B9AD1826D66699AC1DFFB242F310279E6027"
Last-Modified: Tue, 27 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6626
Expires: Fri, 30 Dec 2022 06:00:31 GMT
Date: Fri, 30 Dec 2022 04:10:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b5f5be1a032acd27a7c36172254be2df
de7c6c71c77ea5c676a7a88e8776ee36660df462
1ec163cda3ea9c354c69ef56d8e4b9ad1826d66699ac1dffb242f310279e6027
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1EC163CDA3EA9C354C69EF56D8E4B9AD1826D66699AC1DFFB242F310279E6027"
Last-Modified: Tue, 27 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6626
Expires: Fri, 30 Dec 2022 06:00:31 GMT
Date: Fri, 30 Dec 2022 04:10:05 GMT
Connection: keep-alive
status.thawte.com/
200 OK 471 B IP
Hash e2539f233f93eb6a7f2bcabc81ddefe0
a883a033da0eb85155ee995e569c91fb1b8f674a
9907a72db33ed5dc74687a8f9ee5aadacdbd3facf36c4ab7bc137dfd3196e9f4
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 477
Cache-Control: max-age=128485
Content-Type: application/ocsp-response
Date: Fri, 30 Dec 2022 04:10:05 GMT
Etag: "63adb5a5-1d7"
Expires: Sat, 31 Dec 2022 15:51:30 GMT
Last-Modified: Thu, 29 Dec 2022 15:43:33 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
go.eu.bbelements.com/please/code?j-17114.2.1.4.0.0._blank
200 OK 2.3 kB URL HTTP/1.1 go.eu.bbelements.com/please/code?j-17114.2.1.4.0.0._blank
IP
ASN #13036 T-Mobile Czech Republic a.s.
File type ASCII text, with very long lines (3393), with CRLF, LF line terminators
Hash ad42a619f3c0cfda9a6a0d3b4131ce5f
c03ba9c88fef46c3a3a466e441fc9bf2db4cd0af
d9e9e8ae8f23568eb00fdf22a4bd2609169f2a3db874b984e69ec07686c2f7e6
GET /please/code?j-17114.2.1.4.0.0._blank HTTP/1.1
Host: go.eu.bbelements.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 30 Dec 2022 04:10:05 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: close
Expires: Fri, 30 Dec 2022 06:10:05 GMT
P3P: CP="CUR ADM DEV OUR STP PRE DSP NOI COR NID"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
static.uloz.to/common/fonts/FontIcon.woff2?v=3.300.355
200 OK 23 kB URL HTTP/2 static.uloz.to/common/fonts/FontIcon.woff2?v=3.300.355
IP
ASN #16019 Vodafone Czech Republic a.s.
File type Web Open Font Format (Version 2), TrueType, length 23412, version 1.0\012- data
Hash 00f0be8b229361146624c539ae535616
8f02e04eed85ab16aae980db4cbb5e417779751c
67bf8642a6063104fe73707d51c578e110936a2e3672d1db9bb571aed3252e3c
GET /common/fonts/FontIcon.woff2?v=3.300.355 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ulozto.cz
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:05 GMT
content-type: application/octet-stream
content-length: 23412
last-modified: Tue, 20 Dec 2022 06:58:55 GMT
etag: "63a15d2f-5b74"
expires: Fri, 30 Dec 2022 16:10:05 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Dss/wAjE4NrCvL/wX9zOvQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: yEIYp1JeEY0P2XN5pbPopJQ6YLk=
static.uloz.to/common/fonts/OpenSans-Regular.woff2?v=3.300.355
200 OK 16 kB URL HTTP/2 static.uloz.to/common/fonts/OpenSans-Regular.woff2?v=3.300.355
IP
ASN #16019 Vodafone Czech Republic a.s.
File type Web Open Font Format (Version 2), TrueType, length 15572, version 1.6554\012- data
Hash e64cab167bbdc04807429d10873901a0
afc44700053c9a28f9ab26f6aec4862ac1d0795d
60f9b5203842a4fe2d52f7c96f3c57b755bbf8f347535469739bcc6f95a9c4b5
GET /common/fonts/OpenSans-Regular.woff2?v=3.300.355 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ulozto.cz
Connection: keep-alive
Referer: https://static.uloz.to/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:05 GMT
content-type: application/octet-stream
content-length: 15572
last-modified: Mon, 19 Dec 2022 15:03:35 GMT
etag: "63a07d47-3cd4"
expires: Fri, 30 Dec 2022 16:10:05 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
static.uloz.to/common/images/ico/vector/flag-cz.svg?v=3.300.355
200 OK 429 B URL HTTP/2 static.uloz.to/common/images/ico/vector/flag-cz.svg?v=3.300.355
IP
ASN #16019 Vodafone Czech Republic a.s.
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text
Hash 8775d9badb2d21340089e4ae587121a8
77d84296cfb1374da51d5b6278255cee292eef4c
7a7225b2ed6ab2357cd3d3c24e485769020ebbe9c4d45cb55200d6e56332b5e6
GET /common/images/ico/vector/flag-cz.svg?v=3.300.355 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.uloz.to/ul3/css/style-global.css?v=3.300.355
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:05 GMT
content-type: image/svg+xml
content-length: 429
last-modified: Mon, 19 Dec 2022 15:03:35 GMT
etag: "63a07d47-1ad"
expires: Fri, 30 Dec 2022 16:10:05 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 76cbec9f16aa86443ee15e71d84ff8ee
5553f619cf45df21a74d1b5b0fb65e1a5717be45
0afb9710c22630969ad33eece17100dfb136820bd2ccad92c47435e5d3969ab0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Dec 2022 04:10:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.uloz.to/common/fonts/OpenSans-SemiBold.woff2?v=3.300.355
200 OK 16 kB URL HTTP/2 static.uloz.to/common/fonts/OpenSans-SemiBold.woff2?v=3.300.355
IP
ASN #16019 Vodafone Czech Republic a.s.
File type Web Open Font Format (Version 2), TrueType, length 16164, version 1.6554\012- data
Hash fa907b3395c41e35cdb25dca66a58ca9
a0b0c389cf46d63c850e61fed572485ff0b68183
efc029e0546f49ed87c043e09393a995468c2ab1a139332b3aca0fdbe93fe51e
GET /common/fonts/OpenSans-SemiBold.woff2?v=3.300.355 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ulozto.cz
Connection: keep-alive
Referer: https://static.uloz.to/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:05 GMT
content-type: application/octet-stream
content-length: 16164
last-modified: Mon, 19 Dec 2022 15:03:35 GMT
etag: "63a07d47-3f24"
expires: Fri, 30 Dec 2022 16:10:05 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
static.uloz.to/common/images/ico/vector/file-archive.svg
200 OK 1.8 kB URL HTTP/2 static.uloz.to/common/images/ico/vector/file-archive.svg
IP
ASN #16019 Vodafone Czech Republic a.s.
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (673)
Hash 7ae3c28f716d3fd8035298f1823f4002
4aeed910a4aeeca5b18a82bdeaaf29a980957931
3365e38f375c609d643aae84d2e2d62c45af2184022e2f358d8a54d61f0441e0
GET /common/images/ico/vector/file-archive.svg HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:05 GMT
content-type: image/svg+xml
content-length: 1769
last-modified: Mon, 19 Dec 2022 15:03:35 GMT
etag: "63a07d47-6e9"
expires: Fri, 30 Dec 2022 16:10:05 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
static.uloz.to/ul3/css/style-global.css?v=3.300.355
200 OK 40 kB URL HTTP/2 static.uloz.to/ul3/css/style-global.css?v=3.300.355
IP
ASN #16019 Vodafone Czech Republic a.s.
Hash 6fb5c9ad7a7f2fa135ccb6e0c0fee8e5
a393d45efe09b57c1a639e80644ef5c63b483378
d3b46f6ee25bb444b650666cff1330007d93f6c57beb2071423d560369c0cb32
GET /ul3/css/style-global.css?v=3.300.355 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:05 GMT
content-type: text/css
last-modified: Tue, 20 Dec 2022 10:36:47 GMT
etag: W/"63a1903f-1f7b5"
expires: Fri, 30 Dec 2022 16:10:05 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-T8FDDK
200 OK 59 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-T8FDDK
IP
File type Unicode text, UTF-8 text, with very long lines (33254)
Hash 8d56ac13ebadc85f81d913a3907ff5f7
ed148eddfa68c8d05b6adb0e8dec6637bb671595
2a922a25dcb1b63e0177d4f17af1b8dbe242eff0a6a65ee3c57f30e3bf63943e
GET /gtm.js?id=GTM-T8FDDK HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 30 Dec 2022 04:10:06 GMT
expires: Fri, 30 Dec 2022 04:10:06 GMT
cache-control: private, max-age=900
last-modified: Fri, 30 Dec 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 58651
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash 7a8933a66f30468630778774e8edba1e
2a7b1204342ba290e30884bf6671e233b3663097
554a279706d4d615623c0422dd26a01af1a9ca98d21f8d9f9851c70d4a069cb5
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 801
Cache-Control: max-age=94942
Content-Type: application/ocsp-response
Date: Fri, 30 Dec 2022 04:10:06 GMT
Etag: "63ad315b-1d7"
Expires: Sat, 31 Dec 2022 06:32:28 GMT
Last-Modified: Thu, 29 Dec 2022 06:19:07 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 76cbec9f16aa86443ee15e71d84ff8ee
5553f619cf45df21a74d1b5b0fb65e1a5717be45
0afb9710c22630969ad33eece17100dfb136820bd2ccad92c47435e5d3969ab0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Dec 2022 04:10:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
go.eu.bbelements.com/please/showit/17114/2/1/4/?typkodu=js&ubl=en-US&ucd=24&uce=1&uje=0&uah=1002&uaw=1280&uhe=1024&uwi=1280&uto=0&uti=1672373400094&keywords=&href=https%3A//ulozto.cz/file/BVj6mjAC/smash-hits-1988-2009-eds-rar%3Fq%3Dsmash++hits+-+1988.rar%23%21ZGEwAGR2ZJSzLJMyZGSyLGOxATRkAxAOnz0lDHgxsaqApwV0AD%3D%3D&bust=0.5426268919364208&target=_blank
200 OK 2.0 kB URL HTTP/1.1 go.eu.bbelements.com/please/showit/17114/2/1/4/?typkodu=js&ubl=en-US&ucd=24&uce=1&uje=0&uah=1002&uaw=1280&uhe=1024&uwi=1280&uto=0&uti=1672373400094&keywords=&href=https%3A//ulozto.cz/file/BVj6mjAC/smash-hits-1988-2009-eds-rar%3Fq%3Dsmash++hits+-+1988.rar%23%21ZGEwAGR2ZJSzLJMyZGSyLGOxATRkAxAOnz0lDHgxsaqApwV0AD%3D%3D&bust=0.5426268919364208&target=_blank
IP
ASN #13036 T-Mobile Czech Republic a.s.
File type ASCII text, with very long lines (3393), with CRLF, LF line terminators
Hash 43b213f076cc18e802490539a0f3f66b
62550f4bfec977068f9bf35507b9812641fad51f
effffc8ac3c2a4ebf4a94abc06fbb02ec2305bd01827521e08eda5f6ccd66779
GET /please/showit/17114/2/1/4/?typkodu=js&ubl=en-US&ucd=24&uce=1&uje=0&uah=1002&uaw=1280&uhe=1024&uwi=1280&uto=0&uti=1672373400094&keywords=&href=https%3A//ulozto.cz/file/BVj6mjAC/smash-hits-1988-2009-eds-rar%3Fq%3Dsmash++hits+-+1988.rar%23%21ZGEwAGR2ZJSzLJMyZGSyLGOxATRkAxAOnz0lDHgxsaqApwV0AD%3D%3D&bust=0.5426268919364208&target=_blank HTTP/1.1
Host: go.eu.bbelements.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 30 Dec 2022 04:10:06 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: close
expires: -1
cache-control: no-cache
set-cookie: bm2uu=0_0_1672373406_18_0_0_(null)~*; Path=/please/; Domain=go.eu.bbelements.com; SameSite=None; Max-Age=7776000; Secure
p3p: CP="CUR ADM DEV OUR STP PRE DSP NOI COR NID"
Content-Encoding: gzip
static.uloz.to/javascript/bundle/sentryBrowser.js?v=3.300.355
200 OK 154 kB URL HTTP/2 static.uloz.to/javascript/bundle/sentryBrowser.js?v=3.300.355
IP
ASN #16019 Vodafone Czech Republic a.s.
Size 154 kB (153835 bytes)
Hash 1ac6ea01090a352be71ed0f36b5eadcd
f183d158f15fade45cf918a6fe29cecef2c4fdbf
9c4575a808e628b9d232b705f62740e304f4c40051eae61616da3fd093c0c04d
GET /javascript/bundle/sentryBrowser.js?v=3.300.355 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:06 GMT
content-type: application/x-javascript
last-modified: Mon, 19 Dec 2022 15:07:17 GMT
etag: W/"63a07e25-45548"
expires: Fri, 30 Dec 2022 16:10:06 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
go.eu.bbelements.com/please/track/beacon/?b=1737856977&dstats=17114|2|1|4|0|250782|1026539|2022-12-30|05:10:06|1061672|1|0|11|44|18|0|1|0|91.90.42.154|1280|1024|0|0|1532635802||||0|0&bsh=2274142328&bts=1672373406
200 OK 43 B URL HTTP/1.1 go.eu.bbelements.com/please/track/beacon/?b=1737856977&dstats=17114|2|1|4|0|250782|1026539|2022-12-30|05:10:06|1061672|1|0|11|44|18|0|1|0|91.90.42.154|1280|1024|0|0|1532635802||||0|0&bsh=2274142328&bts=1672373406
IP
ASN #13036 T-Mobile Czech Republic a.s.
File type GIF image data, version 89a, 1 x 1\012- data
Hash c59e2d767fb8529daa1ee1e02373ed75
26b7e27c07998f9f659165978bb2cb58290f9c92
0b048e6b9ac38a829a061196d2d9e688d69d1e4b2b10f81c442fefc97c36bde9
GET /please/track/beacon/?b=1737856977&dstats=17114|2|1|4|0|250782|1026539|2022-12-30|05:10:06|1061672|1|0|11|44|18|0|1|0|91.90.42.154|1280|1024|0|0|1532635802||||0|0&bsh=2274142328&bts=1672373406 HTTP/1.1
Host: go.eu.bbelements.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Cookie: bm2uu=0_0_1672373406_18_0_0_(null)~*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 30 Dec 2022 04:10:06 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: close
Expires: -1
Cache-Control: no-cache
go.eu.bbelements.com/please/showit/22668/1/1/15/?typkodu=js&_idplan=788134&ubl=en-US&ucd=24&uce=1&uje=0&uah=1002&uaw=1280&uhe=1024&uwi=1280&uto=0&uti=1672373400307&bust=0.5877033655824062&target=_blank&clickadd=1&click=https%3A//go.eu.bbelements.com/please/redirect/17114/2/1/4/%21uwi%3D1280%2Cuhe%3D1024%2Cuce%3D0%2Cibbid%3D%2CimpressionId%3Db0c9d0ab-0c27-4cd9-8b30-3679f748bcab%2Cibb_device_id%3D0%2Cip_co%3D18%2Cip_reg%3D0%2Cb_w%3D300%2Cb_h%3D300%2Ctcf2%3D15%2Cparam%3D1061672/1026539_1_%3F
200 OK 2.1 kB URL HTTP/1.1 go.eu.bbelements.com/please/showit/22668/1/1/15/?typkodu=js&_idplan=788134&ubl=en-US&ucd=24&uce=1&uje=0&uah=1002&uaw=1280&uhe=1024&uwi=1280&uto=0&uti=1672373400307&bust=0.5877033655824062&target=_blank&clickadd=1&click=https%3A//go.eu.bbelements.com/please/redirect/17114/2/1/4/%21uwi%3D1280%2Cuhe%3D1024%2Cuce%3D0%2Cibbid%3D%2CimpressionId%3Db0c9d0ab-0c27-4cd9-8b30-3679f748bcab%2Cibb_device_id%3D0%2Cip_co%3D18%2Cip_reg%3D0%2Cb_w%3D300%2Cb_h%3D300%2Ctcf2%3D15%2Cparam%3D1061672/1026539_1_%3F
IP
ASN #13036 T-Mobile Czech Republic a.s.
File type HTML document, ASCII text, with very long lines (3393), with CRLF, LF line terminators
Hash 2ee2b1c47f7c2a293f7174f0da1b3351
c882370ec8271c8f8f7379e53916783a5514f19f
5c0439404dcc14a05d6fd96a8ed43dfda9688dae92855f43628ccb234e6cff0c
GET /please/showit/22668/1/1/15/?typkodu=js&_idplan=788134&ubl=en-US&ucd=24&uce=1&uje=0&uah=1002&uaw=1280&uhe=1024&uwi=1280&uto=0&uti=1672373400307&bust=0.5877033655824062&target=_blank&clickadd=1&click=https%3A//go.eu.bbelements.com/please/redirect/17114/2/1/4/%21uwi%3D1280%2Cuhe%3D1024%2Cuce%3D0%2Cibbid%3D%2CimpressionId%3Db0c9d0ab-0c27-4cd9-8b30-3679f748bcab%2Cibb_device_id%3D0%2Cip_co%3D18%2Cip_reg%3D0%2Cb_w%3D300%2Cb_h%3D300%2Ctcf2%3D15%2Cparam%3D1061672/1026539_1_%3F HTTP/1.1
Host: go.eu.bbelements.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Cookie: bm2uu=0_0_1672373406_18_0_0_(null)~*
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 30 Dec 2022 04:10:06 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: close
expires: -1
cache-control: no-cache
p3p: CP="CUR ADM DEV OUR STP PRE DSP NOI COR NID"
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 471 B IP
Hash 1508f9408437ced9bbd6b48225e1741b
78d277893ec49b3afc979648a440848cf60d09d5
078374d7d32746787bfc992114ea69a39d5491b5c428c069f1444bd607fe4fc7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 963
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 30 Dec 2022 04:10:06 GMT
Last-Modified: Fri, 30 Dec 2022 03:54:03 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
track.adform.net/adfscript/?bn=12487188;click=https://go.eu.bbelements.com/please/redirect/22668/1/1/15/!uwi=1280,uhe=1024,uce=1,ibbid=,impressionId=c3e18248-029b-4c59-b44d-15613bf78e3f,ibb_device_id=0,ip_co=18,ip_reg=0,b_w=300,b_h=600,tcf2=15,param=839756/788134_1_?https%3A%2F%2Fgo.eu.bbelements.com%2Fplease%2Fredirect%2F17114%2F2%2F1%2F4%2F!uwi%3D1280%2Cuhe%3D1024%2Cuce%3D0%2Cibbid%3D%2CimpressionId%3Db0c9d0ab-0c27-4cd9-8b30-3679f748bcab%2Cibb_device_id%3D0%2Cip_co%3D18%2Cip_reg%3D0%2Cb_w%3D300%2Cb_h%3D300%2Ctcf2%3D15%2Cparam%3D1061672%2F1026539_1_%3Fhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D12487188%253BC%253D0
200 OK 879 B URL HTTP/2 track.adform.net/adfscript/?bn=12487188;click=https://go.eu.bbelements.com/please/redirect/22668/1/1/15/!uwi=1280,uhe=1024,uce=1,ibbid=,impressionId=c3e18248-029b-4c59-b44d-15613bf78e3f,ibb_device_id=0,ip_co=18,ip_reg=0,b_w=300,b_h=600,tcf2=15,param=839756/788134_1_?https%3A%2F%2Fgo.eu.bbelements.com%2Fplease%2Fredirect%2F17114%2F2%2F1%2F4%2F!uwi%3D1280%2Cuhe%3D1024%2Cuce%3D0%2Cibbid%3D%2CimpressionId%3Db0c9d0ab-0c27-4cd9-8b30-3679f748bcab%2Cibb_device_id%3D0%2Cip_co%3D18%2Cip_reg%3D0%2Cb_w%3D300%2Cb_h%3D300%2Ctcf2%3D15%2Cparam%3D1061672%2F1026539_1_%3Fhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D12487188%253BC%253D0
IP
File type ASCII text, with very long lines (755), with CRLF line terminators
Hash 2cdaf3f81dce1bef70be5edf2aba8c8e
b70253fd8b32e40b9cac44b485edf7eec35cae53
4297b1e013e0c1f8595b630de1c527bb66306f66ac23bf5993a71663a20251fb
GET /adfscript/?bn=12487188;click=https://go.eu.bbelements.com/please/redirect/22668/1/1/15/!uwi=1280,uhe=1024,uce=1,ibbid=,impressionId=c3e18248-029b-4c59-b44d-15613bf78e3f,ibb_device_id=0,ip_co=18,ip_reg=0,b_w=300,b_h=600,tcf2=15,param=839756/788134_1_?https%3A%2F%2Fgo.eu.bbelements.com%2Fplease%2Fredirect%2F17114%2F2%2F1%2F4%2F!uwi%3D1280%2Cuhe%3D1024%2Cuce%3D0%2Cibbid%3D%2CimpressionId%3Db0c9d0ab-0c27-4cd9-8b30-3679f748bcab%2Cibb_device_id%3D0%2Cip_co%3D18%2Cip_reg%3D0%2Cb_w%3D300%2Cb_h%3D300%2Ctcf2%3D15%2Cparam%3D1061672%2F1026539_1_%3Fhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D12487188%253BC%253D0 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:06 GMT
content-type: text/javascript; charset=utf-8
content-length: 879
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: *
set-cookie: C=1; domain=adform.net; expires=Mon, 30-Jan-2023 04:10:06 GMT; path=/
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
go.eu.bbelements.com/please/track/beacon/?b=240660516&dstats=22668|1|1|15|0|188743|788134|2022-12-30|05:10:06|839756|1|0|11|44|18|0|0|0|91.90.42.154|1280|1024|1|0|1532635802||||0|0&bsh=2272609655&bts=1672373406
200 OK 43 B URL HTTP/1.1 go.eu.bbelements.com/please/track/beacon/?b=240660516&dstats=22668|1|1|15|0|188743|788134|2022-12-30|05:10:06|839756|1|0|11|44|18|0|0|0|91.90.42.154|1280|1024|1|0|1532635802||||0|0&bsh=2272609655&bts=1672373406
IP
ASN #13036 T-Mobile Czech Republic a.s.
File type GIF image data, version 89a, 1 x 1\012- data
Hash c59e2d767fb8529daa1ee1e02373ed75
26b7e27c07998f9f659165978bb2cb58290f9c92
0b048e6b9ac38a829a061196d2d9e688d69d1e4b2b10f81c442fefc97c36bde9
GET /please/track/beacon/?b=240660516&dstats=22668|1|1|15|0|188743|788134|2022-12-30|05:10:06|839756|1|0|11|44|18|0|0|0|91.90.42.154|1280|1024|1|0|1532635802||||0|0&bsh=2272609655&bts=1672373406 HTTP/1.1
Host: go.eu.bbelements.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Cookie: bm2uu=0_0_1672373406_18_0_0_(null)~*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 30 Dec 2022 04:10:06 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: close
Expires: -1
Cache-Control: no-cache
static.uloz.to/javascript/nodus/frameDetect.js?v=3.300.355
200 OK 65 kB URL HTTP/2 static.uloz.to/javascript/nodus/frameDetect.js?v=3.300.355
IP
ASN #16019 Vodafone Czech Republic a.s.
Hash 7bc8d9b48a99650f826a738d822eb0c2
ec6d16fb8edbd9874f1ea92c42830e870d7eb428
c3053a77a669057f26afd65f9b53c27a14bec81b0b135613ab7b7204c614d835
GET /javascript/nodus/frameDetect.js?v=3.300.355 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:06 GMT
content-type: application/x-javascript
last-modified: Mon, 19 Dec 2022 15:07:41 GMT
etag: W/"63a07e3d-b4"
expires: Fri, 30 Dec 2022 16:10:06 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
pw.uloz.to/pw.php?action_name=Smash_Hits_1988-2009-eds.rar%20%7C%20Ulo%C5%BE.to&idsite=1&rec=1&r=598562&h=4&m=10&s=0&url=https%3A%2F%2Fulozto.cz%2Ffile%2FBVj6mjAC%2Fsmash-hits-1988-2009-eds-rar%23!ZGEwAGR2ZJSzLJMyZGSyLGOxATRkAxAOnz0lDHgxsaqApwV0AD%3D%3D&_id=f5c4ef1b8c965f0a&_idn=1&send_image=0&_refts=0&cookie=1&res=1280x1024&pv_id=deTe8d&pf_net=0&pf_srv=250&pf_tfr=42
204 No Response 0 B URL HTTP/1.1 pw.uloz.to/pw.php?action_name=Smash_Hits_1988-2009-eds.rar%20%7C%20Ulo%C5%BE.to&idsite=1&rec=1&r=598562&h=4&m=10&s=0&url=https%3A%2F%2Fulozto.cz%2Ffile%2FBVj6mjAC%2Fsmash-hits-1988-2009-eds-rar%23!ZGEwAGR2ZJSzLJMyZGSyLGOxATRkAxAOnz0lDHgxsaqApwV0AD%3D%3D&_id=f5c4ef1b8c965f0a&_idn=1&send_image=0&_refts=0&cookie=1&res=1280x1024&pv_id=deTe8d&pf_net=0&pf_srv=250&pf_tfr=42
IP
ASN #16019 Vodafone Czech Republic a.s.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pw.php?action_name=Smash_Hits_1988-2009-eds.rar%20%7C%20Ulo%C5%BE.to&idsite=1&rec=1&r=598562&h=4&m=10&s=0&url=https%3A%2F%2Fulozto.cz%2Ffile%2FBVj6mjAC%2Fsmash-hits-1988-2009-eds-rar%23!ZGEwAGR2ZJSzLJMyZGSyLGOxATRkAxAOnz0lDHgxsaqApwV0AD%3D%3D&_id=f5c4ef1b8c965f0a&_idn=1&send_image=0&_refts=0&cookie=1&res=1280x1024&pv_id=deTe8d&pf_net=0&pf_srv=250&pf_tfr=42 HTTP/1.1
Host: pw.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 0
Origin: https://ulozto.cz
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Response
Server: nginx
Date: Fri, 30 Dec 2022 04:10:06 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Access-Control-Allow-Origin: https://ulozto.cz
Access-Control-Allow-Credentials: true
s1.adform.net/stoat/626/s1.adform.net/bootstrap.js
200 OK 18 kB URL HTTP/2 s1.adform.net/stoat/626/s1.adform.net/bootstrap.js
IP
File type ASCII text, with very long lines (3216), with CRLF, LF line terminators
Hash 4a5aadc8440441151d76d59f2749ea4b
d50e07c2f66c6f1d81590064d465fb13c24cf258
f492c181338a729a0717ddb9c9c5a8257a1cb1207d78443bdf92c1d88a36d775
GET /stoat/626/s1.adform.net/bootstrap.js HTTP/1.1
Host: s1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:06 GMT
content-type: text/javascript
vary: Accept-Encoding
access-control-allow-origin: *
last-modified: Wed, 21 Dec 2022 11:59:41 GMT
cache-control: public, max-age=100000
expires: Sat, 31 Dec 2022 07:33:15 GMT
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
ulozto.cz/apple-touch-icon.png?v=3.300.355
200 OK 2.2 kB URL HTTP/2 ulozto.cz/apple-touch-icon.png?v=3.300.355
IP
ASN #16019 Vodafone Czech Republic a.s.
File type PNG image data, 180 x 180, 8-bit colormap, non-interlaced\012- data
Hash 909af915e7f9336df712a44a0c59ee6b
38d5bda9468e726c5faef48200621bf756619365
8607bcd7c494d4f9f732a42e5622d1a556b8cb33212b24003a8b4a217cea7796
GET /apple-touch-icon.png?v=3.300.355 HTTP/1.1
Host: ulozto.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/file/BVj6mjAC/smash-hits-1988-2009-eds-rar?q=smash++hits+-+1988.rar
Cookie: _nss=1; ULOSESSID=s5jhn162goa2le7rdmlhta3tkq; uloztoid=1468898016; uloztoid2=1468898016; skin-switcher-selection=light; abtest=0; _ga_L4S9E2Y7WN=GS1.1.1672373400.1.0.1672373400.0.0.0; _ga=GA1.1.453699715.1672373401; _pk_id.1.c238=f5c4ef1b8c965f0a.1672373401.; _pk_ses.1.c238=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:06 GMT
content-type: image/png
content-length: 2192
last-modified: Tue, 20 Dec 2022 10:34:41 GMT
etag: "63a18fc1-890"
x-node-name: ulozto12
accept-ranges: bytes
X-Firefox-Spdy: h2
ulozto.cz/favicon-16x16.png?v=3.300.355
200 OK 700 B URL HTTP/2 ulozto.cz/favicon-16x16.png?v=3.300.355
IP
ASN #16019 Vodafone Czech Republic a.s.
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 54f7cb33d42696940ddeb4b146bc1413
97769ee6364440d99348a9aab0b1c35299444a70
4e7fe0c610a778cdeba1a6a437036ef424764617822da190f72f01015ca64e2d
GET /favicon-16x16.png?v=3.300.355 HTTP/1.1
Host: ulozto.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/file/BVj6mjAC/smash-hits-1988-2009-eds-rar?q=smash++hits+-+1988.rar
Cookie: _nss=1; ULOSESSID=s5jhn162goa2le7rdmlhta3tkq; uloztoid=1468898016; uloztoid2=1468898016; skin-switcher-selection=light; abtest=0; _ga_L4S9E2Y7WN=GS1.1.1672373400.1.0.1672373400.0.0.0; _ga=GA1.1.453699715.1672373401; _pk_id.1.c238=f5c4ef1b8c965f0a.1672373401.; _pk_ses.1.c238=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:06 GMT
content-type: image/png
content-length: 700
last-modified: Tue, 20 Dec 2022 10:34:41 GMT
etag: "63a18fc1-2bc"
x-node-name: ulozto2
accept-ranges: bytes
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 30 Dec 2022 02:41:11 GMT
expires: Fri, 30 Dec 2022 04:41:11 GMT
cache-control: public, max-age=7200
age: 5335
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.uloz.to/common/fonts/OpenSans-SemiBold-Ext.woff2?v=3.300.355
200 OK 13 kB URL HTTP/2 static.uloz.to/common/fonts/OpenSans-SemiBold-Ext.woff2?v=3.300.355
IP
ASN #16019 Vodafone Czech Republic a.s.
File type Web Open Font Format (Version 2), TrueType, length 12692, version 1.6554\012- data
Hash f1517b1978d9eade19e14b6af80399d9
63eb74ef040aade256f2274a7f31a914edddb0ea
91b334ca58a5a56e8e95cd68e768d400a39f51ec33465a9dc6d2257547ff37bf
GET /common/fonts/OpenSans-SemiBold-Ext.woff2?v=3.300.355 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ulozto.cz
Connection: keep-alive
Referer: https://static.uloz.to/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:06 GMT
content-type: application/octet-stream
content-length: 12692
last-modified: Mon, 19 Dec 2022 15:03:35 GMT
etag: "63a07d47-3194"
expires: Fri, 30 Dec 2022 16:10:06 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
s1.adform.net/stoat/626/s1.adform.net/load/v/0.0.226/e/agBBwCDA/i/vCAv.IAAAAAUAA/r:AdConstructor:contents/ImageTag:types/Standard
200 OK 38 kB URL HTTP/2 s1.adform.net/stoat/626/s1.adform.net/load/v/0.0.226/e/agBBwCDA/i/vCAv.IAAAAAUAA/r:AdConstructor:contents/ImageTag:types/Standard
IP
Hash 0b80edae766e676028573d9b1532c144
cd0d351035873d3081e3b77559bf49fabd913ce8
741058c3bb25490570a23443edb08f5d76482ef7162215279964e8e7ac1eab7d
GET /stoat/626/s1.adform.net/load/v/0.0.226/e/agBBwCDA/i/vCAv.IAAAAAUAA/r:AdConstructor:contents/ImageTag:types/Standard HTTP/1.1
Host: s1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:06 GMT
content-type: text/javascript
vary: Accept-Encoding
access-control-allow-origin: *
last-modified: Wed, 21 Dec 2022 11:59:41 GMT
cache-control: public, max-age=100000
expires: Sat, 31 Dec 2022 07:51:08 GMT
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-L4S9E2Y7WN>m=2oebu0&_p=1644657975&cid=453699715.1672373401&ul=en-us&sr=1280x1024&_s=1&sid=1672373400&sct=1&seg=0&dl=https%3A%2F%2Fulozto.cz%2Ffile%2FBVj6mjAC%2Fsmash-hits-1988-2009-eds-rar&dt=Smash_Hits_1988-2009-eds.rar%20%7C%20Ulo%C5%BE.to&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-L4S9E2Y7WN>m=2oebu0&_p=1644657975&cid=453699715.1672373401&ul=en-us&sr=1280x1024&_s=1&sid=1672373400&sct=1&seg=0&dl=https%3A%2F%2Fulozto.cz%2Ffile%2FBVj6mjAC%2Fsmash-hits-1988-2009-eds-rar&dt=Smash_Hits_1988-2009-eds.rar%20%7C%20Ulo%C5%BE.to&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-L4S9E2Y7WN>m=2oebu0&_p=1644657975&cid=453699715.1672373401&ul=en-us&sr=1280x1024&_s=1&sid=1672373400&sct=1&seg=0&dl=https%3A%2F%2Fulozto.cz%2Ffile%2FBVj6mjAC%2Fsmash-hits-1988-2009-eds-rar&dt=Smash_Hits_1988-2009-eds.rar%20%7C%20Ulo%C5%BE.to&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ulozto.cz
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://ulozto.cz
date: Fri, 30 Dec 2022 04:10:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 99598076cf86d1b9f4f62be6a5be7e2a
3993df3982f70cf4d0580695e4f51e503662228f
ba6e9ba0f6912eede7f2da35d5a7be128d8229cbbd84ead206921a88c59b1858
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=157204
Date: Fri, 30 Dec 2022 04:10:06 GMT
Etag: "63ae1c11-1d7"
Expires: Sat, 31 Dec 2022 23:50:10 GMT
Last-Modified: Thu, 29 Dec 2022 23:00:33 GMT
Server: ECS (nyb/1D2E)
X-Cache: Miss from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: hTllLAIUWUjL8AlukSjI6WsJ88MeL3LzyK0mC0v_ej6WZ47ky-X_nQ==
Age: 2977
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-205967-8&cid=453699715.1672373401&jid=669692155&gjid=1212793925&_gid=267172430.1672373401&_u=aCDAiAAjBAAAAE~&z=576665846
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-205967-8&cid=453699715.1672373401&jid=669692155&gjid=1212793925&_gid=267172430.1672373401&_u=aCDAiAAjBAAAAE~&z=576665846
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-205967-8&cid=453699715.1672373401&jid=669692155&gjid=1212793925&_gid=267172430.1672373401&_u=aCDAiAAjBAAAAE~&z=576665846 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://ulozto.cz
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://ulozto.cz
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 30 Dec 2022 04:10:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03470874067667032
302 Found 0 B URL HTTP/2 ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03470874067667032
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adscale-ih/dum?tpid=101&sec=0&tpuid=03470874067667032 HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 30 Dec 2022 04:10:07 GMT
content-length: 0
location: https://ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03470874067667032&nut&uu=201ba741405d4f51a8a1cc326af62786
set-cookie: uu=201ba741405d4f51a8a1cc326af62786; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
cct=1672373407008; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
s1.adform.net/Banners/56630978/56630978.jpg?bv=2
200 OK 54 kB URL HTTP/2 s1.adform.net/Banners/56630978/56630978.jpg?bv=2
IP
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x250, components 3\012- data
Hash 09413295c941f9128f67e9e164137271
45d3aeba210960ae7b592bb31cf0926e66b56746
be3ae110c1d8b9baf716910b99484308ccf4046f0cbd32138eee1971d4dafadb
GET /Banners/56630978/56630978.jpg?bv=2 HTTP/1.1
Host: s1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:06 GMT
content-type: image/jpeg
content-length: 53549
last-modified: Wed, 07 Dec 2022 10:23:11 GMT
x-rgw-object-type: Normal
etag: "09413295c941f9128f67e9e164137271"
x-amz-request-id: tx00000b88a1f1305d67ef8-0063906a31-3293868f-default
access-control-allow-origin: *
access-control-expose-headers: Content-Range,Content-Length
cache-control: public, max-age=604800
x-cache-status: STALE
accept-ranges: bytes
X-Firefox-Spdy: h2
s1.adform.net/banners/scripts/assets/images/OBA/en.png
200 OK 4.2 kB URL HTTP/2 s1.adform.net/banners/scripts/assets/images/OBA/en.png
IP
File type PNG image data, 72 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash 03731761a34663b5a065acaa2cf51394
a6209b366c173f25982eff74dacbe42a71fde8c9
835b8e7fce8c7030ab18fe28277589c21b062b5b6e6301939cb1e62b1af3f151
GET /banners/scripts/assets/images/OBA/en.png HTTP/1.1
Host: s1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:06 GMT
content-type: image/png
content-length: 4235
last-modified: Wed, 25 May 2022 11:48:05 GMT
x-rgw-object-type: Normal
etag: "03731761a34663b5a065acaa2cf51394"
x-amz-request-id: tx00000fe8538753e6a49ac-00637661a4-3293868f-default
access-control-allow-origin: *
cache-control: public, max-age=604800
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s1.adform.net/banners/scripts/assets/images/OBA/oba.png
200 OK 3.3 kB URL HTTP/2 s1.adform.net/banners/scripts/assets/images/OBA/oba.png
IP
File type PNG image data, 19 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash 794c84d30e213ec6a144d64215f07551
63aff5bf4d7ee4262e9b90d9865163baa77b13f6
2eeaed1b310e214596abec926291c1a41c6333ddaeac312886fc0b5930d71f0e
GET /banners/scripts/assets/images/OBA/oba.png HTTP/1.1
Host: s1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:06 GMT
content-type: image/png
content-length: 3262
last-modified: Wed, 25 May 2022 11:49:23 GMT
x-rgw-object-type: Normal
etag: "794c84d30e213ec6a144d64215f07551"
x-amz-request-id: tx00000e407b56c5c147140-0063766189-329354d9-default
access-control-allow-origin: *
cache-control: public, max-age=604800
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03470874067667032&nut&uu=201ba741405d4f51a8a1cc326af62786
200 OK 2.6 kB URL HTTP/2 ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03470874067667032&nut&uu=201ba741405d4f51a8a1cc326af62786
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (2596), with no line terminators
Hash 14c38156ab984d29bc8f91a171771016
6a4d0f94d7fa6608379b07faf3c91841cda5016e
2324f7ccdddcb9c863e80046ebd4f449e822bce228081cd955bc95668beca3e2
GET /adscale-ih/dum?tpid=101&sec=0&tpuid=03470874067667032&nut&uu=201ba741405d4f51a8a1cc326af62786 HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ulozto.cz/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 04:10:07 GMT
content-type: text/html;charset=ISO-8859-1
content-length: 2596
set-cookie: tu=4#3296081248#48~~464548~464548~1#101~03470874067667032~464548~0~0#38~~464548~464548~1#39~~464548~464548~1#57~~464548~464548~1#42~~464548~464548~1#60~~464548~464548~1#108~~464548~464548~1#63~~464548~464548~1; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
cct=1672373407039; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f9886f7d939bc5ceabc7979a8c88c551
f8b60ed626d10fdaf357a3b14218d2063683a8cb
d57a2b9931924a5bd3637b13a45226115633a2193424483ec8136aa9b3e66c51
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Dec 2022 04:10:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2783127a63c78cb5ac02e1a31631bfca
a26af5a37bbb43d4258282640749ced026ba9560
cfe19d12b6070f9171129591b54bab634d5582e4d8d83e5c1fbe703d873b8366
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CFE19D12B6070F9171129591B54BAB634D5582E4D8D83E5C1FBE703D873B8366"
Last-Modified: Tue, 27 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19190
Expires: Fri, 30 Dec 2022 09:29:57 GMT
Date: Fri, 30 Dec 2022 04:10:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2783127a63c78cb5ac02e1a31631bfca
a26af5a37bbb43d4258282640749ced026ba9560
cfe19d12b6070f9171129591b54bab634d5582e4d8d83e5c1fbe703d873b8366
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CFE19D12B6070F9171129591B54BAB634D5582E4D8D83E5C1FBE703D873B8366"
Last-Modified: Tue, 27 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19190
Expires: Fri, 30 Dec 2022 09:29:57 GMT
Date: Fri, 30 Dec 2022 04:10:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2783127a63c78cb5ac02e1a31631bfca
a26af5a37bbb43d4258282640749ced026ba9560
cfe19d12b6070f9171129591b54bab634d5582e4d8d83e5c1fbe703d873b8366
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CFE19D12B6070F9171129591B54BAB634D5582E4D8D83E5C1FBE703D873B8366"
Last-Modified: Tue, 27 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19190
Expires: Fri, 30 Dec 2022 09:29:57 GMT
Date: Fri, 30 Dec 2022 04:10:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2783127a63c78cb5ac02e1a31631bfca
a26af5a37bbb43d4258282640749ced026ba9560
cfe19d12b6070f9171129591b54bab634d5582e4d8d83e5c1fbe703d873b8366
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CFE19D12B6070F9171129591B54BAB634D5582E4D8D83E5C1FBE703D873B8366"
Last-Modified: Tue, 27 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19190
Expires: Fri, 30 Dec 2022 09:29:57 GMT
Date: Fri, 30 Dec 2022 04:10:07 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F693b81b6-399f-4e04-8c36-91e7c294e358.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F693b81b6-399f-4e04-8c36-91e7c294e358.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 790b80f07301971184300a383d7bf189
288b17ba558694fd0546fa9399a90db81e461138
7e3a09ba6e295d690b1b3c0831614920025ff59001ee31700630a772c0178793
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F693b81b6-399f-4e04-8c36-91e7c294e358.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7569
x-amzn-requestid: 3bf89a71-679e-41d9-8171-120ace98ff1a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d7ZmkFz7IAMFgwg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ae095d-165e127b010f5861658da5c1;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 21:40:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tggqQn1t5gp8bHhiZttB9RcUcPjqBsJOFrbVu1CMNBli8FmnRGoukQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 22:39:27 GMT
age: 19840
etag: "288b17ba558694fd0546fa9399a90db81e461138"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2783127a63c78cb5ac02e1a31631bfca
a26af5a37bbb43d4258282640749ced026ba9560
cfe19d12b6070f9171129591b54bab634d5582e4d8d83e5c1fbe703d873b8366
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CFE19D12B6070F9171129591B54BAB634D5582E4D8D83E5C1FBE703D873B8366"
Last-Modified: Tue, 27 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19190
Expires: Fri, 30 Dec 2022 09:29:57 GMT
Date: Fri, 30 Dec 2022 04:10:07 GMT
Connection: keep-alive
bbcdn-bbnaut.ibillboard.com/library/bbnaut-lib-latest.min.js
200 OK 5.6 kB URL HTTP/2 bbcdn-bbnaut.ibillboard.com/library/bbnaut-lib-latest.min.js
IP
ASN #13036 T-Mobile Czech Republic a.s.
Hash b9813d87a8bcd7a633bfe4cc4e516834
13dd0c8ba5c9483eb8405eae35b85bc67673ff8d
36bc4ec89d4d213e008e0be0be760e5959913f79b2a0c689c3437ea4b2aaf16d
GET /library/bbnaut-lib-latest.min.js HTTP/1.1
Host: bbcdn-bbnaut.ibillboard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:06 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 15 Sep 2022 10:48:18 GMT
etag: W/"632302f2-32b2"
expires: Fri, 06 Jan 2023 00:00:13 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f1d1f4a-0938-4435-add1-1138bb60f652.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f1d1f4a-0938-4435-add1-1138bb60f652.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 96b83d9b35e17cebca37dffb7b82333b
784be5f20f1429e871e710870a8a1e81d2e0dc06
7f3c59bc4a3291856fd52bf6954df7b7220d1076468ab2f8e8fcbf369da0ffa9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f1d1f4a-0938-4435-add1-1138bb60f652.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5752
x-amzn-requestid: cb616ab7-a459-4abe-bafe-907136b5e6d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d7ZTTHNAIAMFrUA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ae08e1-7a5bc1111c94639d6cf11618;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 40H-jc2M751blzRmAIyaw8M6NzR5YegwUdisYInSwBuFR9wNNCNtlw==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 21:55:35 GMT
age: 22472
etag: "784be5f20f1429e871e710870a8a1e81d2e0dc06"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e65abe7-8c08-4373-b72c-c5b95a1009a7.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e65abe7-8c08-4373-b72c-c5b95a1009a7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cfb61d1d2a4d3e62e410c926cfa4a1ab
5c3f269cd16e9dd6bbb2e32efd46a4b2599ca436
4297b6c45e7dca6f841ae56da1040e1287f2e70c98e5f7fc674a674b59ebc7a2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e65abe7-8c08-4373-b72c-c5b95a1009a7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8702
x-amzn-requestid: e9887634-284a-460e-9f73-34e068556eb0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d7ZTTFeUoAMFzIw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ae08e1-2f187ff33a4e0d4a6c7f9171;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dOktBDfbYjoAhGwFI9BhSm4hhFZ0aCcZrbWs-rXDP6CymJOPnuyFVg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 21:51:19 GMT
age: 22728
etag: "5c3f269cd16e9dd6bbb2e32efd46a4b2599ca436"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4aacfdf9-29e5-4cca-88eb-1d7fb007e520.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4aacfdf9-29e5-4cca-88eb-1d7fb007e520.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 51406d6bd4a7322a475fc2a98267154e
9fa03002aa1974d4a9557cedad8bd5d7fefa52ad
a1858d9fd203972f0dc3fe97f36e07796b84f6e2851c9990d406f452793e3454
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4aacfdf9-29e5-4cca-88eb-1d7fb007e520.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11315
x-amzn-requestid: 77dd9348-e3a9-448e-8ae9-499d5d672a41
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d4GZpGTRIAMFTUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63acb770-7dec07d1447e6f10125b8b6f;Sampled=0
x-amzn-remapped-date: Wed, 28 Dec 2022 21:38:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lfojNVZMHGD1YfOqiMgEwTOi_6uPqkVJ_gbQ0PKo5CLFycpcY89T1g==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 21:42:30 GMT
age: 23257
etag: "9fa03002aa1974d4a9557cedad8bd5d7fefa52ad"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bf4a552-d5ba-4ddd-93e2-f6e1ef1b88a0.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bf4a552-d5ba-4ddd-93e2-f6e1ef1b88a0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0ce9b1df881e3bf251f0fb3017aa0971
0ad29185d75d779be6e254db0192e361b160b315
73217f465522d3c705f8dc1790240eb22500c5aa06f28b4843f4a3dda6eeef15
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bf4a552-d5ba-4ddd-93e2-f6e1ef1b88a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9963
x-amzn-requestid: 17210a82-11a0-4503-b1a2-9a778b8dd823
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d7aqJEnloAMFWwA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ae0b0d-3ce147c70b1f079c3633e3de;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 21:47:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 3J-CrXvM0nCwyP5QXZIplqFG0yTMIRnYMvfDBl9aEz42C2FhzNbQmw==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 22:26:42 GMT
etag: "0ad29185d75d779be6e254db0192e361b160b315"
content-type: image/jpeg
age: 20605
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59a00921-670d-4d42-8d38-4adc489e84fc.webp
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59a00921-670d-4d42-8d38-4adc489e84fc.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a420fd559ef25d34ee67e7ad924754dc
8af81fc3bcd1447ad6318d6c0973c96cd0d274db
b2fbf57e833264e53a22c4361a8e4a21d57886f7b419889bfdc15c0b46783da5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59a00921-670d-4d42-8d38-4adc489e84fc.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8304
x-amzn-requestid: 98c46da7-857c-44be-86b1-f94b23be3821
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d44n2EEYIAMFkWw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ad07cb-636c41041748af7a27f7ad39;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 03:21:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: LcudzBZihPaz5Fn0GenuCNnPGWw1Fs7fYN_eoLg0WZFYxqJhOUCfgA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 16:12:38 GMT
age: 43049
etag: "8af81fc3bcd1447ad6318d6c0973c96cd0d274db"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8b09274f35f179f5864c1239bc5cab72
bdcba81321107acec70cf2473bdd19b4b99590e1
8fa4c07e35ccbf18d0821d7f84d680401fc0e3ffb7ec21d98afce1a10ff31679
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Dec 2022 04:10:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 682cbddcfdb68a8e77dc78949bf5bbc1
1ea7c9b419854f0ef2e28430e885a82fc74017a1
4d721442aeafdf78f7969d62c2557a8e353e81eb9a056c393f96965aeaf90f4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Dec 2022 04:10:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-205967-8&cid=453699715.1672373401&jid=669692155&_u=aCDAiAAjBAAAAE~&z=1966947348
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-205967-8&cid=453699715.1672373401&jid=669692155&_u=aCDAiAAjBAAAAE~&z=1966947348
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-205967-8&cid=453699715.1672373401&jid=669692155&_u=aCDAiAAjBAAAAE~&z=1966947348 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 30 Dec 2022 04:10:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-205967-8&cid=453699715.1672373401&jid=669692155&_u=aCDAiAAjBAAAAE~&z=1966947348
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-205967-8&cid=453699715.1672373401&jid=669692155&_u=aCDAiAAjBAAAAE~&z=1966947348
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-205967-8&cid=453699715.1672373401&jid=669692155&_u=aCDAiAAjBAAAAE~&z=1966947348 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 30 Dec 2022 04:10:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 919036d583e399d9a3e30d966ee400fe
e8e0f052e888a5c3bbde69093a73c6c7c70b11d3
6267139d5b1975721b82b7fdabad7e70c567a384d060b613bb954d82b5321473
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2230
Cache-Control: max-age=124097
Content-Type: application/ocsp-response
Date: Fri, 30 Dec 2022 04:10:07 GMT
Etag: "63ad9dab-117"
Expires: Sat, 31 Dec 2022 14:38:24 GMT
Last-Modified: Thu, 29 Dec 2022 14:01:15 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8b09274f35f179f5864c1239bc5cab72
bdcba81321107acec70cf2473bdd19b4b99590e1
8fa4c07e35ccbf18d0821d7f84d680401fc0e3ffb7ec21d98afce1a10ff31679
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Dec 2022 04:10:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c9a6a4c5ca0c5f3edafc44366269c44a
9d5e3d681a413142372bd90d7a52a333b5051f0f
ddaa67b57bc244d6eeb7dc8e0b9f0fb4a46876df61cd612c74442e7f328a5101
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Dec 2022 04:10:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ssum.casalemedia.com/usermatchredir?s=183592&cb=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D63%26tpuid%3D__UID__&uid=b9da4f6bd6cc4eece77d6183762554e027e32c93d7620a4c4387afedbb2c792b&tpid=63&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F0%2Fimg
302 Found 0 B URL HTTP/2 ssum.casalemedia.com/usermatchredir?s=183592&cb=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D63%26tpuid%3D__UID__&uid=b9da4f6bd6cc4eece77d6183762554e027e32c93d7620a4c4387afedbb2c792b&tpid=63&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F0%2Fimg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatchredir?s=183592&cb=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D63%26tpuid%3D__UID__&uid=b9da4f6bd6cc4eece77d6183762554e027e32c93d7620a4c4387afedbb2c792b&tpid=63&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F0%2Fimg HTTP/1.1
Host: ssum.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 30 Dec 2022 04:10:07 GMT
content-length: 0
location: /usermatchredir?cb=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D63%26tpuid%3D__UID__&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F0%2Fimg&s=183592&tpid=63&uid=b9da4f6bd6cc4eece77d6183762554e027e32c93d7620a4c4387afedbb2c792b&C=1
cf-ray: 7817ec838f23b51b-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
pragma: no-cache
set-cookie: CMID=Y65kn4GY3flqSGDgz1UL5QAA; Path=/; Domain=casalemedia.com; Expires=Sat, 30 Dec 2023 04:10:07 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=1828; Path=/; Domain=casalemedia.com; Expires=Thu, 30 Mar 2023 04:10:07 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=1828; Path=/; Domain=casalemedia.com; Expires=Thu, 30 Mar 2023 04:10:07 GMT; Max-Age=7776000; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B4e0XrJmsBaTSVjXtpn%2FTbXVUa1KsxnqwI1P9LCEvgcldy0gyy1V%2BF%2BCm4%2FpC0N%2FKZUYifT%2FU4LWM2%2BwjwjDkkK8dh82GMQNXZ8CLEoVsVF7Jl4oVfrL10YYM%2BjGz2owNHGTR%2B9i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash d6132e11d21920070fec7bcbd318cee3
f2f89a7dae0e4fde77c533b840db0131fd95fc24
200d71c01f1072c4076caf31691d03e35c369b30d2751aa69f42f89b8a9a66e2
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5080
Cache-Control: max-age=150356
Content-Type: application/ocsp-response
Date: Fri, 30 Dec 2022 04:10:07 GMT
Etag: "63adf91b-1d7"
Expires: Sat, 31 Dec 2022 21:56:03 GMT
Last-Modified: Thu, 29 Dec 2022 20:31:23 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 279 B IP
Hash 919036d583e399d9a3e30d966ee400fe
e8e0f052e888a5c3bbde69093a73c6c7c70b11d3
6267139d5b1975721b82b7fdabad7e70c567a384d060b613bb954d82b5321473
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2230
Cache-Control: max-age=124097
Content-Type: application/ocsp-response
Date: Fri, 30 Dec 2022 04:10:07 GMT
Etag: "63ad9dab-117"
Expires: Sat, 31 Dec 2022 14:38:24 GMT
Last-Modified: Thu, 29 Dec 2022 14:01:15 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
ssum.casalemedia.com/usermatchredir?cb=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D63%26tpuid%3D__UID__&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F0%2Fimg&s=183592&tpid=63&uid=b9da4f6bd6cc4eece77d6183762554e027e32c93d7620a4c4387afedbb2c792b&C=1
302 Found 0 B URL HTTP/2 ssum.casalemedia.com/usermatchredir?cb=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D63%26tpuid%3D__UID__&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F0%2Fimg&s=183592&tpid=63&uid=b9da4f6bd6cc4eece77d6183762554e027e32c93d7620a4c4387afedbb2c792b&C=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatchredir?cb=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D63%26tpuid%3D__UID__&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F0%2Fimg&s=183592&tpid=63&uid=b9da4f6bd6cc4eece77d6183762554e027e32c93d7620a4c4387afedbb2c792b&C=1 HTTP/1.1
Host: ssum.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Fri, 30 Dec 2022 04:10:07 GMT
content-length: 0
location: https://ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=63&tpuid=0
cf-ray: 7817ec83df4fb51b-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xrmbozlfKw1a11sjYUIclf7WZ0MDN8%2B8ttZS7gLvCuGpb8GGfC344pQ3%2BiTihbLbqN0%2BZqRaIS3A53zdrxhvemyFK6zK7zvi6%2BQxq8YCLw2h7CFP8R3Mtz9C2%2ByIC6TZqeXiIV3c"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=63&tpuid=0
200 OK 49 B URL HTTP/2 ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=63&tpuid=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /sium/429371437437189942/1437437190794/0/img?tpid=63&tpuid=0 HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 04:10:07 GMT
content-type: image/gif
content-length: 49
set-cookie: cct=1672373407387; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
uu=f27cfdc75d9745508a97c4958959da65; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash f7a6864be5733efed1314e9fbc06c2ef
570dc3fd9eaefc99a3db17374b836524cc1ce4fe
8cd577d8b4985dc284e83b4648388bf87092db1809a065883bd90ce0db11f1a9
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 04:10:07 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Tue, 03 Jan 2023 01:48:49 GMT
ETag: "570dc3fd9eaefc99a3db17374b836524cc1ce4fe"
Last-Modified: Fri, 30 Dec 2022 01:48:50 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2436
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7817ec84da25b500-OSL
match.adsrvr.org/track/cmf/generic?ttd_pid=adscale&ttd_tpi=1&uid=dd7b6d78928c9e4cbfefd4cd6d5fca7c27250601ffd63b92e3aec0c84ccbc098&tpid=60&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F202%2Fimg
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=adscale&ttd_tpi=1&uid=dd7b6d78928c9e4cbfefd4cd6d5fca7c27250601ffd63b92e3aec0c84ccbc098&tpid=60&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F202%2Fimg
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=adscale&ttd_tpi=1&uid=dd7b6d78928c9e4cbfefd4cd6d5fca7c27250601ffd63b92e3aec0c84ccbc098&tpid=60&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F202%2Fimg HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 30 Dec 2022 04:10:07 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash b8e9cc6ede4b7904338fa4bc069332a0
fed9f2f99c22c521638b3a1a3d05b5325ab38dce
1d75b991b48dcb53c6fcb00932c19576e5cc134bb8f47440286494f2fd30cc72
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=97270
Date: Fri, 30 Dec 2022 04:10:07 GMT
Etag: "63ad39cb-1d7"
Expires: Sat, 31 Dec 2022 07:11:17 GMT
Last-Modified: Thu, 29 Dec 2022 06:55:07 GMT
Server: ECS (nyb/1D06)
X-Cache: Miss from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: NKcqbQJ9hyEj-_Xgx-omiirxF5znDBkdQR1k2gOdu1eBSRCtk0k0QA==
Age: 970
tracking.m6r.eu/sync/adscaleRedirect?gdprFallback=true&uid=5c4dbcb55a82f46c20c0483c4bd29e41b263ba89b0c93b51226d930a855ec06d&tpid=48&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F372%2Fimg
302 Found 289 B URL HTTP/1.1 tracking.m6r.eu/sync/adscaleRedirect?gdprFallback=true&uid=5c4dbcb55a82f46c20c0483c4bd29e41b263ba89b0c93b51226d930a855ec06d&tpid=48&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F372%2Fimg
IP
File type ASCII text, with no line terminators
Hash df3fb9321439968fec4c96d72b070bd0
82d1ef9a262be932c194edd619ec743d42f92d93
7379fcfd3f2c78d8390337c8effcfc906a6030c67b140b503786d824e6713ac6
GET /sync/adscaleRedirect?gdprFallback=true&uid=5c4dbcb55a82f46c20c0483c4bd29e41b263ba89b0c93b51226d930a855ec06d&tpid=48&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F372%2Fimg HTTP/1.1
Host: tracking.m6r.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
content-length: 289
content-type: text/plain; charset=utf-8
date: Fri, 30 Dec 2022 04:10:07 GMT
location: https://tracking-a.dsp.m6r.eu/sync/adscaleRedirect?gdprFallback=true&uid=5c4dbcb55a82f46c20c0483c4bd29e41b263ba89b0c93b51226d930a855ec06d&tpid=48&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F372%2Fimg&checkcookies=true
set-cookie: test=true; Max-Age=3600; Domain=m6r.eu; Path=/; Expires=Fri, 30 Dec 2022 05:10:07 GMT; Secure; SameSite=None
vary: Accept
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3fe8469a23a39f6534a56655c97a8771
ba9aea10ecb9004423753402c6198455cc8b84b0
b0955eb26182199287184dd5a29404f07c1eeaf12bf65ae8a8693e2efca2b39a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=127711
Date: Fri, 30 Dec 2022 04:10:07 GMT
Etag: "63ada344-1d7"
Expires: Sat, 31 Dec 2022 15:38:38 GMT
Last-Modified: Thu, 29 Dec 2022 14:25:08 GMT
Server: ECS (nyb/1D1E)
X-Cache: Miss from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: RsHwadIVfRWXDz7ejpZN-E9ItMpqaMEaN-DgYsjw3C-jVmwMiDczAA==
Age: 4410
track.adform.net/csimpr/?bn=12487188&csi=-t1pYahIiypl0b_llH2LleUqPiAFv-Kx2cpk_KjDZSPbNUjYKkRX5toj5KtB9xV12QR9n-t5gjkp-4Ah6Wfa2ryOpNDfIsLF0
200 OK 185 B URL HTTP/2 track.adform.net/csimpr/?bn=12487188&csi=-t1pYahIiypl0b_llH2LleUqPiAFv-Kx2cpk_KjDZSPbNUjYKkRX5toj5KtB9xV12QR9n-t5gjkp-4Ah6Wfa2ryOpNDfIsLF0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 8fa47fbbf680a6a265e9ba09e8d5800b
bb1421f9d1319ae0e47aa4e818cec5a84f1394af
ffe3a3fee1ec9478fb74ee3de5c703437b36e6818ac5f8f48fe0941516d56050
POST /csimpr/?bn=12487188&csi=-t1pYahIiypl0b_llH2LleUqPiAFv-Kx2cpk_KjDZSPbNUjYKkRX5toj5KtB9xV12QR9n-t5gjkp-4Ah6Wfa2ryOpNDfIsLF0 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://ulozto.cz
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:07 GMT
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: https://ulozto.cz
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Content-Type, Cache-Control, Accept-Encoding, X-Requested-With
access-control-max-age: 86400
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ih.adscale.de/sium/cf3aac50ff5c4140ba033d6b9d01773a/1672373407039/372/img?tpid=48&tpuid=017207c31d4deb049a80c17ad191e843
200 OK 49 B URL HTTP/2 ih.adscale.de/sium/cf3aac50ff5c4140ba033d6b9d01773a/1672373407039/372/img?tpid=48&tpuid=017207c31d4deb049a80c17ad191e843
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /sium/cf3aac50ff5c4140ba033d6b9d01773a/1672373407039/372/img?tpid=48&tpuid=017207c31d4deb049a80c17ad191e843 HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 04:10:08 GMT
content-type: image/gif
content-length: 49
set-cookie: tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
cct=1672373408099; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
uu=fd18ab1c867c48ec82f73d473d49d11d; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
track.adform.net/serving/cookie/match/?party=9&uid=888a8fa483224c06bcf2fd7e91850d75725c0926162631bd421b7d487de5008b&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F914%2Fimg
302 Found 0 B URL HTTP/2 track.adform.net/serving/cookie/match/?party=9&uid=888a8fa483224c06bcf2fd7e91850d75725c0926162631bd421b7d487de5008b&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F914%2Fimg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /serving/cookie/match/?party=9&uid=888a8fa483224c06bcf2fd7e91850d75725c0926162631bd421b7d487de5008b&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F914%2Fimg HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Fri, 30 Dec 2022 04:10:08 GMT
content-length: 0
location: https://track.adform.net/serving/cookie/match/?CC=1&party=9&uid=888a8fa483224c06bcf2fd7e91850d75725c0926162631bd421b7d487de5008b&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F914%2Fimg
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
set-cookie: C=1; expires=Mon, 30 Jan 2023 04:10:08 GMT; domain=adform.net; path=/
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 7316afc6698197f9d76c91de26a19659
03dbe9456c4bedf39b5a9acd81f90ac81d3c4bd2
1fc954b3c549ff4ef976b874b94c3ed5f44c580a45692bb2464007a8bbceaa30
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4117
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 30 Dec 2022 04:10:08 GMT
Last-Modified: Fri, 30 Dec 2022 03:01:31 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
track.adform.net/serving/cookie/match/?CC=1&party=9&uid=888a8fa483224c06bcf2fd7e91850d75725c0926162631bd421b7d487de5008b&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F914%2Fimg
200 OK 35 B URL HTTP/2 track.adform.net/serving/cookie/match/?CC=1&party=9&uid=888a8fa483224c06bcf2fd7e91850d75725c0926162631bd421b7d487de5008b&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F914%2Fimg
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /serving/cookie/match/?CC=1&party=9&uid=888a8fa483224c06bcf2fd7e91850d75725c0926162631bd421b7d487de5008b&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F914%2Fimg HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:08 GMT
content-type: image/gif
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=39&tpuid=071363ae-64a0-4d00-85ea-4520dc2e68f2
200 OK 49 B URL HTTP/2 ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=39&tpuid=071363ae-64a0-4d00-85ea-4520dc2e68f2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /sium/429371437437189942/1437437190794/0/img?tpid=39&tpuid=071363ae-64a0-4d00-85ea-4520dc2e68f2 HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 04:10:08 GMT
content-type: image/gif
content-length: 49
set-cookie: uu=959b546f13774521b94683e9a2fe7baf; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
cct=1672373408371; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=adscale&google_cm&google_sc&uid=bb7363f0c12e7e30a1ef0977be714b8dd4ff76892e5d3872bf9cdbb645239b92&tpid=38&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F1186%2Fimg
302 Found 489 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=adscale&google_cm&google_sc&uid=bb7363f0c12e7e30a1ef0977be714b8dd4ff76892e5d3872bf9cdbb645239b92&tpid=38&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F1186%2Fimg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (312), with CRLF, LF line terminators
Hash 5ae351cd580ad96d0d60cb404edcb911
14ee771e6ad257e442a6a776d659351ea305a894
63f7998756575b24e2a304ecfa41e18d4cf7e67ca4c8626311259b20cb6a9067
GET /pixel?google_nid=adscale&google_cm&google_sc&uid=bb7363f0c12e7e30a1ef0977be714b8dd4ff76892e5d3872bf9cdbb645239b92&tpid=38&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F1186%2Fimg HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=adscale&google_cm=&google_sc=&uid=bb7363f0c12e7e30a1ef0977be714b8dd4ff76892e5d3872bf9cdbb645239b92&tpid=38&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F1186%2Fimg&google_tc=
date: Fri, 30 Dec 2022 04:10:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 489
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 30-Dec-2022 04:25:08 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=adscale&google_cm=&google_sc=&uid=bb7363f0c12e7e30a1ef0977be714b8dd4ff76892e5d3872bf9cdbb645239b92&tpid=38&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F1186%2Fimg&google_tc=
200 OK 170 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=adscale&google_cm=&google_sc=&uid=bb7363f0c12e7e30a1ef0977be714b8dd4ff76892e5d3872bf9cdbb645239b92&tpid=38&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F1186%2Fimg&google_tc=
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash e7673c60af825466f83d46da72ca1635
fc0fcbee0835709ba2d28798a612bfd687903fb5
0b8a20373c6dd04e091902226d922b3688143a8938afb9d283d889de7b55ceb5
GET /pixel?google_nid=adscale&google_cm=&google_sc=&uid=bb7363f0c12e7e30a1ef0977be714b8dd4ff76892e5d3872bf9cdbb645239b92&tpid=38&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F1186%2Fimg&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
date: Fri, 30 Dec 2022 04:10:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
server: HTTP server (unknown)
content-length: 170
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 6bf128dcf27090f096cc31a0b34787c1
1b03e07b95512213b1c097c665a5037dbb70224e
aee9bdfcda995b898bf30784e05817d40d6a1eeb8e25565ad0685e992986cd5c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 04:10:08 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 27 Dec 2022 13:56:53 GMT
Expires: Tue, 03 Jan 2023 13:56:52 GMT
Etag: "1b03e07b95512213b1c097c665a5037dbb70224e"
Cache-Control: max-age=380203,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7817ec8c2ad5b4f1-OSL
x.bidswitch.net/sync?ssp=adscale&uid=29d4d72dbb83a54f6355772f8d2952fc66ee7274f5d85341759b1a320228932b&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F1304%2Fimg
302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?ssp=adscale&uid=29d4d72dbb83a54f6355772f8d2952fc66ee7274f5d85341759b1a320228932b&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F1304%2Fimg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?ssp=adscale&uid=29d4d72dbb83a54f6355772f8d2952fc66ee7274f5d85341759b1a320228932b&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F1304%2Fimg HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 30 Dec 2022 04:10:08 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?ssp=adscale&uid=29d4d72dbb83a54f6355772f8d2952fc66ee7274f5d85341759b1a320228932b&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F1304%2Fimg
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=1b751205-ccf5-49c9-9639-11853d38b8b9; path=/; expires=Sat, 30-Dec-2023 04:10:08 GMT; domain=.bidswitch.net; samesite=none; secure
c=1672373408; path=/; expires=Sat, 30-Dec-2023 04:10:08 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1672373408; path=/; expires=Sat, 30-Dec-2023 04:10:08 GMT; domain=.bidswitch.net; samesite=none; secure
c=1672373408; path=/; expires=Sat, 30-Dec-2023 04:10:08 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
x.bidswitch.net/ul_cb/sync?ssp=adscale&uid=29d4d72dbb83a54f6355772f8d2952fc66ee7274f5d85341759b1a320228932b&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F1304%2Fimg
302 Found 0 B URL HTTP/2 x.bidswitch.net/ul_cb/sync?ssp=adscale&uid=29d4d72dbb83a54f6355772f8d2952fc66ee7274f5d85341759b1a320228932b&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F1304%2Fimg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ul_cb/sync?ssp=adscale&uid=29d4d72dbb83a54f6355772f8d2952fc66ee7274f5d85341759b1a320228932b&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F1304%2Fimg HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Fri, 30 Dec 2022 04:10:08 GMT
content-length: 0
cache-control: no-cache, no-store, must-revalidate
location: //ih.adscale.de/adscale-ih/sium?tpid=57&tpuid=0&gdpr=&gdpr_consent=
X-Firefox-Spdy: h2
ih.adscale.de/adscale-ih/sium?tpid=57&tpuid=0&gdpr=&gdpr_consent=
200 OK 49 B URL HTTP/2 ih.adscale.de/adscale-ih/sium?tpid=57&tpuid=0&gdpr=&gdpr_consent=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /adscale-ih/sium?tpid=57&tpuid=0&gdpr=&gdpr_consent= HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 04:10:08 GMT
content-type: image/gif
content-length: 49
set-cookie: uu=f966ed6f9c1e4fffa713358317d2cb8a; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
cct=1672373408784; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
sync.mathtag.com/sync/img?mt_exid=26&redir=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D108%26tpuid%3D%5BMM_UUID%5D&uid=269ddfdcfcd95864a8c261f0ac237c272b7efdf6aed5a94a6f5f987027594ca0&tpid=108&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F1598%2Fimg
302 Moved Temporarily 0 B URL HTTP/1.1 sync.mathtag.com/sync/img?mt_exid=26&redir=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D108%26tpuid%3D%5BMM_UUID%5D&uid=269ddfdcfcd95864a8c261f0ac237c272b7efdf6aed5a94a6f5f987027594ca0&tpid=108&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F1598%2Fimg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/img?mt_exid=26&redir=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D108%26tpuid%3D%5BMM_UUID%5D&uid=269ddfdcfcd95864a8c261f0ac237c272b7efdf6aed5a94a6f5f987027594ca0&tpid=108&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2Fcf3aac50ff5c4140ba033d6b9d01773a%2F1672373407039%2F1598%2Fimg HTTP/1.1
Host: sync.mathtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Fri, 30 Dec 2022 04:10:08 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=360
Access-Control-Allow-Origin: *
Server: MT3 277 3f0ad7a master zrh-pixel-x13 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: uuid=0a6a63ae-64a0-4e00-8a0a-e1efdd0bbf7b; domain=.mathtag.com; path=/; expires=Sat, 27-Jan-2024 04:10:08 GMT; SameSite=None; Secure
location: https://ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=108&tpuid=0a6a63ae-64a0-4e00-8a0a-e1efdd0bbf7b
Expires: Fri, 30 Dec 2022 04:10:07 GMT
ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=108&tpuid=0a6a63ae-64a0-4e00-8a0a-e1efdd0bbf7b
200 OK 49 B URL HTTP/2 ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=108&tpuid=0a6a63ae-64a0-4e00-8a0a-e1efdd0bbf7b
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /sium/429371437437189942/1437437190794/0/img?tpid=108&tpuid=0a6a63ae-64a0-4e00-8a0a-e1efdd0bbf7b HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 04:10:08 GMT
content-type: image/gif
content-length: 49
set-cookie: tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
uu=3e1f536bf25b4cb3985d1ee585a75b93; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
cct=1672373408855; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
bbnaut.ibillboard.com/match/AdScale?partneruid=5fb4c6f44bcf48fb9cdad27f9c8ed290
200 OK 213 B URL HTTP/2 bbnaut.ibillboard.com/match/AdScale?partneruid=5fb4c6f44bcf48fb9cdad27f9c8ed290
IP
ASN #13036 T-Mobile Czech Republic a.s.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 64650f8b131d3c953f33e8f367bd4cc6
007f037406b45f101176023baa101d7baf1555d3
4a68b9982fa57cd44eddf8c766108ecb02ed023dd19c675dc9dee10618afeac1
GET /match/AdScale?partneruid=5fb4c6f44bcf48fb9cdad27f9c8ed290 HTTP/1.1
Host: bbnaut.ibillboard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:08 GMT
content-type: image/gif
cache-control: private, max-age=86400
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ulozto.cz/detect.html?adblock=0×tamp=1378395240
200 OK 11 B URL HTTP/2 ulozto.cz/detect.html?adblock=0×tamp=1378395240
IP
ASN #16019 Vodafone Czech Republic a.s.
Hash dc1342749768d306c75e85f051948538
a93b30924fd08a79d386799109325e7c5e276dcf
9d04e229036853c5f10e9aa473df15d1394d402dd1f780bb32476d90e1afbe9a
GET /detect.html?adblock=0×tamp=1378395240 HTTP/1.1
Host: ulozto.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://ulozto.cz/file/BVj6mjAC/smash-hits-1988-2009-eds-rar
Cookie: _nss=1; ULOSESSID=s5jhn162goa2le7rdmlhta3tkq; uloztoid=1468898016; uloztoid2=1468898016; skin-switcher-selection=light; abtest=0; _ga_L4S9E2Y7WN=GS1.1.1672373400.1.0.1672373400.0.0.0; _ga=GA1.2.453699715.1672373401; _pk_id.1.c238=f5c4ef1b8c965f0a.1672373401.; _pk_ses.1.c238=1; _gid=GA1.2.267172430.1672373401; _dc_gtm_UA-205967-8=1; ibbid=BBID-01-03470874071277451-16801344; adblock_detected=false
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:09 GMT
content-type: text/html
content-length: 11
last-modified: Tue, 20 Dec 2022 10:34:41 GMT
etag: "63a18fc1-b"
x-node-name: ulozto7
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bf126537438ca2668cde251d6dc8fad
d47bc3af6e204a1812614ae4f0c3d8ad60d591b3
76378c0bdc58289ea2fd71d89bce5d730274884adb9dc2051208883c6b134a81
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "76378C0BDC58289EA2FD71D89BCE5D730274884ADB9DC2051208883C6B134A81"
Last-Modified: Tue, 27 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15387
Expires: Fri, 30 Dec 2022 08:26:36 GMT
Date: Fri, 30 Dec 2022 04:10:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 15d73da5d64a92fd7003b7ec5fdec7bb
9cd3aa79d238c6f8d5e03306c8f5c15ce826bf70
30e26bf1c2fee3525e742c0c231dcc973e7033415096f97313f9a023bcc02b09
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "30E26BF1C2FEE3525E742C0C231DCC973E7033415096F97313F9A023BCC02B09"
Last-Modified: Wed, 28 Dec 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8418
Expires: Fri, 30 Dec 2022 06:30:27 GMT
Date: Fri, 30 Dec 2022 04:10:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 15d73da5d64a92fd7003b7ec5fdec7bb
9cd3aa79d238c6f8d5e03306c8f5c15ce826bf70
30e26bf1c2fee3525e742c0c231dcc973e7033415096f97313f9a023bcc02b09
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "30E26BF1C2FEE3525E742C0C231DCC973E7033415096F97313F9A023BCC02B09"
Last-Modified: Wed, 28 Dec 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8418
Expires: Fri, 30 Dec 2022 06:30:27 GMT
Date: Fri, 30 Dec 2022 04:10:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 15d73da5d64a92fd7003b7ec5fdec7bb
9cd3aa79d238c6f8d5e03306c8f5c15ce826bf70
30e26bf1c2fee3525e742c0c231dcc973e7033415096f97313f9a023bcc02b09
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "30E26BF1C2FEE3525E742C0C231DCC973E7033415096F97313F9A023BCC02B09"
Last-Modified: Wed, 28 Dec 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8418
Expires: Fri, 30 Dec 2022 06:30:27 GMT
Date: Fri, 30 Dec 2022 04:10:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 15d73da5d64a92fd7003b7ec5fdec7bb
9cd3aa79d238c6f8d5e03306c8f5c15ce826bf70
30e26bf1c2fee3525e742c0c231dcc973e7033415096f97313f9a023bcc02b09
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "30E26BF1C2FEE3525E742C0C231DCC973E7033415096F97313F9A023BCC02B09"
Last-Modified: Wed, 28 Dec 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8418
Expires: Fri, 30 Dec 2022 06:30:27 GMT
Date: Fri, 30 Dec 2022 04:10:09 GMT
Connection: keep-alive
megadarky.ic.cz/16594-ulozto_ads_small/sada-vinylovych-samolepek-star-wars-sila-29-ks.jpg
200 OK 2.9 kB URL HTTP/2 megadarky.ic.cz/16594-ulozto_ads_small/sada-vinylovych-samolepek-star-wars-sila-29-ks.jpg
IP
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash 5b872378008f20a68bb5a00834112999
50c8cbc42d188be52caa1f0f6d8b4c37b98dc53e
1cfe848a6184f1c119faf54414e1f77536a9e8c402c38f46153c8978243cae4c
GET /16594-ulozto_ads_small/sada-vinylovych-samolepek-star-wars-sila-29-ks.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/ad15.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:47 GMT
content-type: image/jpeg
content-length: 2935
last-modified: Mon, 04 Oct 2021 12:30:13 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 29 Jan 2023 04:10:47 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/16149-ulozto_ads_small/plakat-star-wars-imperial-fleet.jpg
200 OK 2.2 kB URL HTTP/2 megadarky.ic.cz/16149-ulozto_ads_small/plakat-star-wars-imperial-fleet.jpg
IP
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash e956ae9a086e499eac33c367c0926384
504d11aa3cb46cd23b22577bd4d1b21e6c8e3733
83c005b178e2bf8e642220a81d8116b50290b7ede11738577c629b3bfbae4fc1
GET /16149-ulozto_ads_small/plakat-star-wars-imperial-fleet.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/ad15.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:47 GMT
content-type: image/jpeg
content-length: 2217
last-modified: Mon, 04 Oct 2021 12:23:31 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 29 Jan 2023 04:10:47 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/16454-ulozto_ads_small/zalozka-harry-potter-relikvie-smrti.jpg
200 OK 1.4 kB URL HTTP/2 megadarky.ic.cz/16454-ulozto_ads_small/zalozka-harry-potter-relikvie-smrti.jpg
IP
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash c445266ee5e515293c3bbb79a0dac850
0c50003e0103cd790203dcc0ce96914f61504a3c
89c62130e14f487ae30f4908b6dbb3863cbc8f4dea0587b63df239537b7db801
GET /16454-ulozto_ads_small/zalozka-harry-potter-relikvie-smrti.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/ad15.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:47 GMT
content-type: image/jpeg
content-length: 1374
last-modified: Mon, 04 Oct 2021 12:27:49 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 29 Jan 2023 04:10:47 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f9470f5c8a231f657a6f7d935a4946cc
d301aea9a620161d224ca417d4483b19edc43895
9244d582f8e01055e71e13468b4ca7cbce79556e968696885348219ba5066424
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Dec 2022 04:10:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/2.1.4/jquery.min.js
200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/2.1.4/jquery.min.js
IP
File type ASCII text, with very long lines (32025)
Hash 83b3b5729cdff3976db52c51831e96b8
d23dc823e37f58e5366340be755730f3fa9a850d
675fa88b39008a09994460a93b310a7d4593735009a9b24b6f176c347ad12421
GET /ajax/libs/jquery/2.1.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29725
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Dec 2022 17:40:20 GMT
expires: Sat, 23 Dec 2023 17:40:20 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 556189
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
megadarky.ic.cz/15824-ulozto_ads_small/hrnek-miluji-te-kazdy-den.jpg
200 OK 1.6 kB URL HTTP/2 megadarky.ic.cz/15824-ulozto_ads_small/hrnek-miluji-te-kazdy-den.jpg
IP
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", progressive, precision 8, 80x80, components 3\012- data
Hash 4b1c8a79881b4363f13f956dcd906f5b
f80743fad43839c6baff78012c02943a788dec81
70825277e90d26bc493fca9eb9daf4bb964f68b5e29c08d28eb453e27a1e0efc
GET /15824-ulozto_ads_small/hrnek-miluji-te-kazdy-den.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/ad15.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:47 GMT
content-type: image/jpeg
content-length: 1643
last-modified: Sat, 20 Jan 2018 18:47:21 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 29 Jan 2023 04:10:47 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/16842-ulozto_ads_small/nahrdelnik-s-hodinkami-harry-potter-zlatonka.jpg
200 OK 1.7 kB URL HTTP/2 megadarky.ic.cz/16842-ulozto_ads_small/nahrdelnik-s-hodinkami-harry-potter-zlatonka.jpg
IP
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash 689c277a54492cca6c138327e44bb31f
912b6d1b4bae74dea83277e5275a90e8f5040397
6504d1ca063616e5b4a780d5716384acbd20f1ec57325a38886b56b86961b474
GET /16842-ulozto_ads_small/nahrdelnik-s-hodinkami-harry-potter-zlatonka.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/ad15.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:47 GMT
content-type: image/jpeg
content-length: 1689
last-modified: Mon, 04 Oct 2021 12:33:20 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 29 Jan 2023 04:10:47 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/16611-ulozto_ads_small/plakat-star-wars-mandalorian-dark.jpg
200 OK 2.3 kB URL HTTP/2 megadarky.ic.cz/16611-ulozto_ads_small/plakat-star-wars-mandalorian-dark.jpg
IP
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash 8290aeab16e2747c2430215ef823e09d
e670d95685000ab1aa2a3d5244f702f9c4b27896
47faa0ec612ba8777c2e3b7259a19fb6d5ea263b3b15f1a18bcb9e505eef14bf
GET /16611-ulozto_ads_small/plakat-star-wars-mandalorian-dark.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/ad15.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:47 GMT
content-type: image/jpeg
content-length: 2294
last-modified: Mon, 04 Oct 2021 12:30:24 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 29 Jan 2023 04:10:47 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/2337-ulozto_ads_small/plavky-borat-mankini.jpg
200 OK 6.8 kB URL HTTP/2 megadarky.ic.cz/2337-ulozto_ads_small/plavky-borat-mankini.jpg
IP
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", progressive, precision 8, 80x80, components 3\012- data
Hash d14b5d8e45ef8bbfa9134061df7f54e9
2db9a521f754d8fc91f1f50c2fc079ebbc7dd5e5
911da69e915039581f03483059a8657c05fdda64a7a78ac6647347109b10b64a
GET /2337-ulozto_ads_small/plavky-borat-mankini.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/ad15.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:47 GMT
content-type: image/jpeg
content-length: 6825
last-modified: Fri, 04 Sep 2015 09:56:48 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 29 Jan 2023 04:10:47 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/17037-ulozto_ads_small/hrnek-diablo-iv-hotter-than-hell.jpg
200 OK 2.4 kB URL HTTP/2 megadarky.ic.cz/17037-ulozto_ads_small/hrnek-diablo-iv-hotter-than-hell.jpg
IP
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash f63d4bf2359f3db0945da243f0ae079d
aba171133274d7ef53afdf80b2be5ca1dde81946
fe963421b88feda54b6c15ddb1e9a6c0732a65c2b750013c88eb467aff8ffa3e
GET /17037-ulozto_ads_small/hrnek-diablo-iv-hotter-than-hell.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/ad15.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:47 GMT
content-type: image/jpeg
content-length: 2410
last-modified: Mon, 04 Oct 2021 12:36:36 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 29 Jan 2023 04:10:47 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/16945-ulozto_ads_small/sada-koralku-harry-potter-chibi.jpg
200 OK 2.6 kB URL HTTP/2 megadarky.ic.cz/16945-ulozto_ads_small/sada-koralku-harry-potter-chibi.jpg
IP
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash a720e872d3ce7f40eb0e3f750ef97402
fc3cb7cd82c624b7bd3c243b697b2fe2cf532143
6d9aab2fbc67405852ada20e153113b96adbe232db55e3931a499849c42a2f0c
GET /16945-ulozto_ads_small/sada-koralku-harry-potter-chibi.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/ad15.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:47 GMT
content-type: image/jpeg
content-length: 2623
last-modified: Mon, 04 Oct 2021 12:34:56 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 29 Jan 2023 04:10:47 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/16869-ulozto_ads_small/skolni-pouzdro-star-wars-the-mandalorian-naps-and-snacks.jpg
200 OK 2.1 kB URL HTTP/2 megadarky.ic.cz/16869-ulozto_ads_small/skolni-pouzdro-star-wars-the-mandalorian-naps-and-snacks.jpg
IP
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash a1290ef73bfdcea63ce67e97c8ab6e5a
22d7960a4dad8f70d4da5b0db01b54b4b9e63575
a95ea191c9c40215293bc4a5a0f4d56d96d77900328186b176a0a6409637de3a
GET /16869-ulozto_ads_small/skolni-pouzdro-star-wars-the-mandalorian-naps-and-snacks.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/ad15.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:47 GMT
content-type: image/jpeg
content-length: 2142
last-modified: Mon, 04 Oct 2021 12:33:41 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 29 Jan 2023 04:10:47 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/16518-ulozto_ads_small/plakat-avengers-infinity-war-postavy.jpg
200 OK 3.6 kB URL HTTP/2 megadarky.ic.cz/16518-ulozto_ads_small/plakat-avengers-infinity-war-postavy.jpg
IP
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash 9cfe3d22616cbd795ad0a0d0a58e1735
d93038004388e99360536a6b74d1e4bc78897771
7b663d502b1917c69faa34128f7699208db16553e3cbe862e6dcb53dea56ff32
GET /16518-ulozto_ads_small/plakat-avengers-infinity-war-postavy.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/ad15.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:47 GMT
content-type: image/jpeg
content-length: 3616
last-modified: Mon, 04 Oct 2021 12:29:19 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 29 Jan 2023 04:10:47 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/16546-ulozto_ads_small/zapisnik-cthulhu-necronomicon.jpg
200 OK 2.5 kB URL HTTP/2 megadarky.ic.cz/16546-ulozto_ads_small/zapisnik-cthulhu-necronomicon.jpg
IP
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash 6cabea82fd547628d0e25d6dfea5852f
44281bd833517204d613eacd82c6c9e42e5df95d
143181a2ac05dc308332dca3e64ddda45e46f872b066635d4146836f13daacd7
GET /16546-ulozto_ads_small/zapisnik-cthulhu-necronomicon.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/ad15.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:47 GMT
content-type: image/jpeg
content-length: 2518
last-modified: Mon, 04 Oct 2021 12:29:43 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 29 Jan 2023 04:10:47 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/16095-ulozto_ads_small/hra-o-truny-pecici-forma-stark.jpg
200 OK 1.9 kB URL HTTP/2 megadarky.ic.cz/16095-ulozto_ads_small/hra-o-truny-pecici-forma-stark.jpg
IP
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", progressive, precision 8, 80x80, components 3\012- data
Hash 8f4dd5e4e3e3211515ac73ec943e2743
f5480968f00ed3a9b911e5ef081a8ec3841894f6
3721af824c099c8601112178828d7fb38bcd8f49427fd7e096a40054a6db1647
GET /16095-ulozto_ads_small/hra-o-truny-pecici-forma-stark.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/ad15.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:47 GMT
content-type: image/jpeg
content-length: 1923
last-modified: Fri, 27 Sep 2019 15:00:12 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 29 Jan 2023 04:10:47 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/12314-ulozto_ads_small/teleskopicka-lzice-na-boty.jpg
200 OK 5.2 kB URL HTTP/2 megadarky.ic.cz/12314-ulozto_ads_small/teleskopicka-lzice-na-boty.jpg
IP
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", progressive, precision 8, 80x80, components 3\012- data
Hash d5266b63246f84ce794c5c9f33b0c543
8051ef8945703caf695c9b57213c6b09c728f8aa
a3372b071eda0a738348e25c3424d8b08258458657de72eb2ad9591df662cdfd
GET /12314-ulozto_ads_small/teleskopicka-lzice-na-boty.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/ad15.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:47 GMT
content-type: image/jpeg
content-length: 5192
last-modified: Fri, 06 Nov 2015 15:14:43 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 29 Jan 2023 04:10:47 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/16465-ulozto_ads_small/sada-privesku-harry-potter.jpg
200 OK 2.2 kB URL HTTP/2 megadarky.ic.cz/16465-ulozto_ads_small/sada-privesku-harry-potter.jpg
IP
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash cd30286b29d30af3885a96871fab10a7
888436b7b750776785d4b8a5c3c9125048cfb103
cabd8ff65361b4981faeba4b97dc3ec2e878c835ce855040863366ca6edbfc98
GET /16465-ulozto_ads_small/sada-privesku-harry-potter.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/ad15.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:47 GMT
content-type: image/jpeg
content-length: 2152
last-modified: Mon, 04 Oct 2021 12:27:56 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 29 Jan 2023 04:10:47 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/17009-ulozto_ads_small/skolni-pouzdro-friends.jpg
200 OK 2.5 kB URL HTTP/2 megadarky.ic.cz/17009-ulozto_ads_small/skolni-pouzdro-friends.jpg
IP
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash 10a0b36e3ba83a30f697f5cf5a1e8d0c
0ff0f702ff0dc3c6473a94dc85263edfafa1bc71
9fa7b727f868e4e624e68eb7aab3bdadd97d4c00196149c460e33ac139bc323a
GET /17009-ulozto_ads_small/skolni-pouzdro-friends.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/ad15.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:47 GMT
content-type: image/jpeg
content-length: 2500
last-modified: Mon, 04 Oct 2021 12:36:13 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 29 Jan 2023 04:10:47 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/17021-ulozto_ads_small/klicenka-friends-frame.jpg
200 OK 2.4 kB URL HTTP/2 megadarky.ic.cz/17021-ulozto_ads_small/klicenka-friends-frame.jpg
IP
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash 02c46f83c349a7dc8ec17437de51c677
df52667346ac48523d3a4da960213075c72dd9b5
940a251b82cad16634cb8783d777f74c65d261791f81ed88945ac97d7c8e662d
GET /17021-ulozto_ads_small/klicenka-friends-frame.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/ad15.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:47 GMT
content-type: image/jpeg
content-length: 2405
last-modified: Mon, 04 Oct 2021 12:36:25 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 29 Jan 2023 04:10:47 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/15693-ulozto_ads_small/hrnek-keep-calm.jpg
200 OK 5.0 kB URL HTTP/2 megadarky.ic.cz/15693-ulozto_ads_small/hrnek-keep-calm.jpg
IP
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", progressive, precision 8, 80x80, components 3\012- data
Hash 2f288cbe64cdfd0fc03fd1ad9932eece
eb2d6be9fb787032a6e462501edf77f81d36494e
be05e99b728d1f5473de9d7e81088c9b98ce84282c4b0bc6ec87449ae71a8805
GET /15693-ulozto_ads_small/hrnek-keep-calm.jpg HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/ad15.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:47 GMT
content-type: image/jpeg
content-length: 4977
last-modified: Tue, 21 Nov 2017 18:56:34 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 29 Jan 2023 04:10:47 GMT
X-Firefox-Spdy: h2
megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/mgd-logo.png
200 OK 5.9 kB URL HTTP/2 megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/mgd-logo.png
IP
ASN #16019 Vodafone Czech Republic a.s.
File type PNG image data, 80 x 80, 8-bit/color RGB, non-interlaced\012- data
Hash f6a12696bbcbd651c9f9240a6c9e8fa4
57ccfdd692110a46cfae4f388c356e100aa7bb91
8db95b7e96837e4a07b5224c65221b0996abb68da066a085b7f8c8ceb5e4c7fa
GET /ulozto_ads/ulozto_ads_1/ads/mgd-logo.png HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/ad15.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:47 GMT
content-type: image/png
content-length: 5943
last-modified: Wed, 01 Jun 2016 08:30:23 GMT
cache-control: max-age=2592000
expires: Sun, 29 Jan 2023 04:10:47 GMT
etag: "574e9d1f-1737"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f9470f5c8a231f657a6f7d935a4946cc
d301aea9a620161d224ca417d4483b19edc43895
9244d582f8e01055e71e13468b4ca7cbce79556e968696885348219ba5066424
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Dec 2022 04:10:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
content-provider10.greencdn.io/50k.bin?_=1672373400056
200 OK 51 kB URL HTTP/1.1 content-provider10.greencdn.io/50k.bin?_=1672373400056
IP
ASN #16019 Vodafone Czech Republic a.s.
Hash bf235f22df3e004ede21041978c24f2e
7188972f71aee4c62669330ff7776e48094b4d9d
16fa66a7dc98d93f2a4c5d20baf5177f59c4c37fc62face65690c11c15fe6ff9
GET /50k.bin?_=1672373400056 HTTP/1.1
Host: content-provider10.greencdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ulozto.cz
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 30 Dec 2022 04:10:09 GMT
Content-Type: application/octet-stream
Content-Length: 51200
Last-Modified: Fri, 13 Nov 2020 08:43:48 GMT
Connection: keep-alive
ETag: "5fae4744-c800"
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Security-Policy: upgrade-insecure-requests
Accept-Ranges: bytes
track.adform.net/serving/unload/?version=15&unload=-5932061713061764574@@12487188,3211844414738571663,100|1017|0|789|226|0|0|0|0||65|0|||||1|0|0|OyFmELpARjmjXuUM8tfH4hazj2RYsgytiwNRt6eOXPZ3CZRraUahEQJ1gDRGwv2I0|||10|0|0
200 OK 51 kB URL HTTP/2 track.adform.net/serving/unload/?version=15&unload=-5932061713061764574@@12487188,3211844414738571663,100|1017|0|789|226|0|0|0|0||65|0|||||1|0|0|OyFmELpARjmjXuUM8tfH4hazj2RYsgytiwNRt6eOXPZ3CZRraUahEQJ1gDRGwv2I0|||10|0|0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ecd3995cbd444dfae4d676f621390b4a
5d5911da352dcff1bef0378bc9047f04fd354106
02088803218dc92326d6153dcc6bfed99c48f4865ac07f39d9f7bece3cfbe6c6
POST /serving/unload/?version=15&unload=-5932061713061764574@@12487188,3211844414738571663,100|1017|0|789|226|0|0|0|0||65|0|||||1|0|0|OyFmELpARjmjXuUM8tfH4hazj2RYsgytiwNRt6eOXPZ3CZRraUahEQJ1gDRGwv2I0|||10|0|0 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://ulozto.cz
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:08 GMT
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: https://ulozto.cz
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-allow-headers: Content-Type, Cache-Control, Accept-Encoding, X-Requested-With
access-control-max-age: 86400
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
content-provider14.greencdn.io/50k.bin?_=1672373400055
200 OK 51 kB URL HTTP/1.1 content-provider14.greencdn.io/50k.bin?_=1672373400055
IP
ASN #16019 Vodafone Czech Republic a.s.
Hash bf235f22df3e004ede21041978c24f2e
7188972f71aee4c62669330ff7776e48094b4d9d
16fa66a7dc98d93f2a4c5d20baf5177f59c4c37fc62face65690c11c15fe6ff9
GET /50k.bin?_=1672373400055 HTTP/1.1
Host: content-provider14.greencdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ulozto.cz
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 30 Dec 2022 04:10:09 GMT
Content-Type: application/octet-stream
Content-Length: 51200
Last-Modified: Tue, 10 Nov 2020 09:58:36 GMT
Connection: keep-alive
ETag: "5faa644c-c800"
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Security-Policy: upgrade-insecure-requests
Accept-Ranges: bytes
content-cache39.greencdn.io/50k.bin?_=1672373400054
200 OK 51 kB URL HTTP/1.1 content-cache39.greencdn.io/50k.bin?_=1672373400054
IP
ASN #16019 Vodafone Czech Republic a.s.
Hash bf235f22df3e004ede21041978c24f2e
7188972f71aee4c62669330ff7776e48094b4d9d
16fa66a7dc98d93f2a4c5d20baf5177f59c4c37fc62face65690c11c15fe6ff9
GET /50k.bin?_=1672373400054 HTTP/1.1
Host: content-cache39.greencdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ulozto.cz
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 30 Dec 2022 04:10:09 GMT
Content-Type: application/octet-stream
Content-Length: 51200
Connection: keep-alive
Last-Modified: Wed, 12 Oct 2022 12:21:57 GMT
ETag: "6346b165-c800"
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Security-Policy: upgrade-insecure-requests
Accept-Ranges: bytes
go.eu.bbelements.com/please/showit/17114/2/1/16/?typkodu=html&ubl=en-US&ucd=24&uce=0&uje=0&uah=1002&uaw=1280&uhe=1024&uwi=1280&uto=0&uti=1672373403546&href=https%3A//advert.uloz.to/ads/ad-6764.html%3Flogged%3D0%26page%3Dfile%252FBVj6mjAC%252Fsmash-hits-1988-2009-eds-rar%253Fq%253Dsmash%252520%252520hits%252520-%2525201988.rar%26origin%3Dulozto.cz%26adult%3D0%26hide_video%3D0&__INWIDTH=120&__INHEIGHT=600&bgcolor=FFFFFF&text=000000&link=0000FF&bust=0.866119082200287&target=_blank
200 OK 1.8 kB URL HTTP/1.1 go.eu.bbelements.com/please/showit/17114/2/1/16/?typkodu=html&ubl=en-US&ucd=24&uce=0&uje=0&uah=1002&uaw=1280&uhe=1024&uwi=1280&uto=0&uti=1672373403546&href=https%3A//advert.uloz.to/ads/ad-6764.html%3Flogged%3D0%26page%3Dfile%252FBVj6mjAC%252Fsmash-hits-1988-2009-eds-rar%253Fq%253Dsmash%252520%252520hits%252520-%2525201988.rar%26origin%3Dulozto.cz%26adult%3D0%26hide_video%3D0&__INWIDTH=120&__INHEIGHT=600&bgcolor=FFFFFF&text=000000&link=0000FF&bust=0.866119082200287&target=_blank
IP
ASN #13036 T-Mobile Czech Republic a.s.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (3393), with CRLF, LF line terminators
Hash f2447bf0e6e786986b1ecb32e5d87e0c
bb585b8bb061856eb4dbad9799613f8c29d98eb3
792d5c1a2e543d728496800a5674c02dc1b41bcf2306c45b766c030542c1e8a9
GET /please/showit/17114/2/1/16/?typkodu=html&ubl=en-US&ucd=24&uce=0&uje=0&uah=1002&uaw=1280&uhe=1024&uwi=1280&uto=0&uti=1672373403546&href=https%3A//advert.uloz.to/ads/ad-6764.html%3Flogged%3D0%26page%3Dfile%252FBVj6mjAC%252Fsmash-hits-1988-2009-eds-rar%253Fq%253Dsmash%252520%252520hits%252520-%2525201988.rar%26origin%3Dulozto.cz%26adult%3D0%26hide_video%3D0&__INWIDTH=120&__INHEIGHT=600&bgcolor=FFFFFF&text=000000&link=0000FF&bust=0.866119082200287&target=_blank HTTP/1.1
Host: go.eu.bbelements.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advert.uloz.to/
Cookie: bm2uu=0_0_1672373406_18_0_0_(null)~*
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 30 Dec 2022 04:10:09 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
expires: -1
cache-control: no-cache
p3p: CP="CUR ADM DEV OUR STP PRE DSP NOI COR NID"
Content-Encoding: gzip
static.uloz.to/staticadvert/bannery/2022/Vivala_2022/120x600.jpg
200 OK 27 kB URL HTTP/2 static.uloz.to/staticadvert/bannery/2022/Vivala_2022/120x600.jpg
IP
ASN #16019 Vodafone Czech Republic a.s.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "Created with GIMP", progressive, precision 8, 120x600, components 3\012- data
Hash 46cad3b3feb4f822cf95c52b9f8c4bb0
d9142143df17ea111ad5ca85f7e065c592bc6102
b0c3131ccae1ffaefbab92d1909ccf64b07bf23169cca08291fbc4b23d217ce3
GET /staticadvert/bannery/2022/Vivala_2022/120x600.jpg HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.eu.bbelements.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:09 GMT
content-type: image/jpeg
content-length: 27016
last-modified: Tue, 22 Feb 2022 18:13:18 GMT
etag: "621527be-6988"
expires: Fri, 30 Dec 2022 16:10:09 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03470874067667032
302 Found 0 B URL HTTP/2 ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03470874067667032
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adscale-ih/dum?tpid=101&sec=0&tpuid=03470874067667032 HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.eu.bbelements.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Fri, 30 Dec 2022 04:10:09 GMT
content-length: 0
location: https://ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03470874067667032&nut&uu=ae2a569b3ef041c0933c373bb524c5cc
set-cookie: uu=ae2a569b3ef041c0933c373bb524c5cc; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
cct=1672373409699; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03470874067667032&nut&uu=ae2a569b3ef041c0933c373bb524c5cc
200 OK 2.6 kB URL HTTP/2 ih.adscale.de/adscale-ih/dum?tpid=101&sec=0&tpuid=03470874067667032&nut&uu=ae2a569b3ef041c0933c373bb524c5cc
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (2596), with no line terminators
Hash 8b2cd05cc02032c21762853f25bae8ff
6974076c228a14236ee4df4738308516ed03a889
c54199b9dc003960487c589e858c53c746551a5ed0e86e227548a6ab978d01f7
GET /adscale-ih/dum?tpid=101&sec=0&tpuid=03470874067667032&nut&uu=ae2a569b3ef041c0933c373bb524c5cc HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://go.eu.bbelements.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 04:10:09 GMT
content-type: text/html;charset=ISO-8859-1
content-length: 2596
set-cookie: tu=4#3296081248#48~~464548~464548~1#101~03470874067667032~464548~0~0#38~~464548~464548~1#39~~464548~464548~1#57~~464548~464548~1#42~~464548~464548~1#60~~464548~464548~1#108~~464548~464548~1#63~~464548~464548~1; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
cct=1672373409730; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
content-provider10.greencdn.io/1m.bin?_=1672373400057
200 OK 1.0 MB URL HTTP/1.1 content-provider10.greencdn.io/1m.bin?_=1672373400057
IP
ASN #16019 Vodafone Czech Republic a.s.
Size 1.0 MB (1048576 bytes)
Hash b6d81b360a5672d80c27430f39153e2c
3b71f43ff30f4b15b5cd85dd9e95ebc7e84eb5a3
30e14955ebf1352266dc2ff8067e68104607e750abb9d3b36582b8af909fcb58
GET /1m.bin?_=1672373400057 HTTP/1.1
Host: content-provider10.greencdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ulozto.cz
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 30 Dec 2022 04:10:09 GMT
Content-Type: application/octet-stream
Content-Length: 1048576
Last-Modified: Fri, 13 Nov 2020 08:43:48 GMT
Connection: keep-alive
ETag: "5fae4744-100000"
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Content-Security-Policy: upgrade-insecure-requests
Accept-Ranges: bytes
ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=63&tpuid=0
200 OK 49 B URL HTTP/2 ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=63&tpuid=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /sium/429371437437189942/1437437190794/0/img?tpid=63&tpuid=0 HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 04:10:09 GMT
content-type: image/gif
content-length: 49
set-cookie: cct=1672373409903; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
uu=287791e7758b422f953e50dcee3026c9; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
match.adsrvr.org/track/cmf/generic?ttd_pid=adscale&ttd_tpi=1&uid=2b8bb1b37d037c8dfeb9ad18b45583845ff6b20b4423423c1b269d5a077302d6&tpid=60&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F05bcf3bc7ff445b39f97ef6acadf4446%2F1672373409730%2F149%2Fimg
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=adscale&ttd_tpi=1&uid=2b8bb1b37d037c8dfeb9ad18b45583845ff6b20b4423423c1b269d5a077302d6&tpid=60&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F05bcf3bc7ff445b39f97ef6acadf4446%2F1672373409730%2F149%2Fimg
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=adscale&ttd_tpi=1&uid=2b8bb1b37d037c8dfeb9ad18b45583845ff6b20b4423423c1b269d5a077302d6&tpid=60&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F05bcf3bc7ff445b39f97ef6acadf4446%2F1672373409730%2F149%2Fimg HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 04:10:09 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
tracking.m6r.eu/sync/adscaleRedirect?gdprFallback=true&uid=2a779eed177c345154b6d216d322d9710c5502abb7391db119e750f6d8a30204&tpid=48&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F05bcf3bc7ff445b39f97ef6acadf4446%2F1672373409730%2F200%2Fimg
302 Found 150 B URL HTTP/1.1 tracking.m6r.eu/sync/adscaleRedirect?gdprFallback=true&uid=2a779eed177c345154b6d216d322d9710c5502abb7391db119e750f6d8a30204&tpid=48&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F05bcf3bc7ff445b39f97ef6acadf4446%2F1672373409730%2F200%2Fimg
IP
File type ASCII text, with no line terminators
Hash e0918a2494b826109607f7714dfaf39f
4486f369d2e152c43316c4aa01a234d199843b44
32a4273819208542da432ce8c200b54a77fd0ac7b9ff77f0b1e1ff1f425cbf76
GET /sync/adscaleRedirect?gdprFallback=true&uid=2a779eed177c345154b6d216d322d9710c5502abb7391db119e750f6d8a30204&tpid=48&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F05bcf3bc7ff445b39f97ef6acadf4446%2F1672373409730%2F200%2Fimg HTTP/1.1
Host: tracking.m6r.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Cookie: test=true; cct=1672373408065; id=017207c31d4deb049a80c17ad191e843
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
content-length: 150
content-type: text/plain; charset=utf-8
date: Fri, 30 Dec 2022 04:10:09 GMT
location: https://ih.adscale.de/sium/05bcf3bc7ff445b39f97ef6acadf4446/1672373409730/200/img?tpid=48&tpuid=017207c31d4deb049a80c17ad191e843
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
vary: Accept
ih.adscale.de/sium/05bcf3bc7ff445b39f97ef6acadf4446/1672373409730/200/img?tpid=48&tpuid=017207c31d4deb049a80c17ad191e843
200 OK 49 B URL HTTP/2 ih.adscale.de/sium/05bcf3bc7ff445b39f97ef6acadf4446/1672373409730/200/img?tpid=48&tpuid=017207c31d4deb049a80c17ad191e843
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /sium/05bcf3bc7ff445b39f97ef6acadf4446/1672373409730/200/img?tpid=48&tpuid=017207c31d4deb049a80c17ad191e843 HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 04:10:10 GMT
content-type: image/gif
content-length: 49
set-cookie: tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
uu=4215d924e0ea4daa8ea87ca9040187aa; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
cct=1672373410019; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
track.adform.net/serving/cookie/match/?party=9&uid=8d7c7dd30225af67c9f3de0506194ed89aba5087e1a703f21c854b74b43e8297&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F05bcf3bc7ff445b39f97ef6acadf4446%2F1672373409730%2F266%2Fimg
302 Found 0 B URL HTTP/2 track.adform.net/serving/cookie/match/?party=9&uid=8d7c7dd30225af67c9f3de0506194ed89aba5087e1a703f21c854b74b43e8297&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F05bcf3bc7ff445b39f97ef6acadf4446%2F1672373409730%2F266%2Fimg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /serving/cookie/match/?party=9&uid=8d7c7dd30225af67c9f3de0506194ed89aba5087e1a703f21c854b74b43e8297&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F05bcf3bc7ff445b39f97ef6acadf4446%2F1672373409730%2F266%2Fimg HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Fri, 30 Dec 2022 04:10:10 GMT
content-length: 0
location: https://track.adform.net/serving/cookie/match/?CC=1&party=9&uid=8d7c7dd30225af67c9f3de0506194ed89aba5087e1a703f21c854b74b43e8297&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F05bcf3bc7ff445b39f97ef6acadf4446%2F1672373409730%2F266%2Fimg
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
set-cookie: C=1; expires=Mon, 30 Jan 2023 04:10:10 GMT; domain=adform.net; path=/
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
sync.mathtag.com/sync/img?mt_exid=26&redir=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D39%26tpuid%3D%5BMM_UUID%5D&uid=6da7a610b35cafb7729c42990f7d623f4a2fadb15c3453d86bb026383ed59244&tpid=39&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F05bcf3bc7ff445b39f97ef6acadf4446%2F1672373409730%2F309%2Fimg
302 Moved Temporarily 0 B URL HTTP/1.1 sync.mathtag.com/sync/img?mt_exid=26&redir=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D39%26tpuid%3D%5BMM_UUID%5D&uid=6da7a610b35cafb7729c42990f7d623f4a2fadb15c3453d86bb026383ed59244&tpid=39&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F05bcf3bc7ff445b39f97ef6acadf4446%2F1672373409730%2F309%2Fimg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/img?mt_exid=26&redir=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D39%26tpuid%3D%5BMM_UUID%5D&uid=6da7a610b35cafb7729c42990f7d623f4a2fadb15c3453d86bb026383ed59244&tpid=39&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F05bcf3bc7ff445b39f97ef6acadf4446%2F1672373409730%2F309%2Fimg HTTP/1.1
Host: sync.mathtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Fri, 30 Dec 2022 04:10:10 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=360
Access-Control-Allow-Origin: *
Server: MT3 277 3f0ad7a master zrh-pixel-x14 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: uuid=646063ae-64a3-4b00-9fea-b9253dd3c5cd; domain=.mathtag.com; path=/; expires=Sat, 27-Jan-2024 04:10:11 GMT; SameSite=None; Secure
location: https://ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=39&tpuid=646063ae-64a3-4b00-9fea-b9253dd3c5cd
Expires: Fri, 30 Dec 2022 04:10:09 GMT
ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=39&tpuid=646063ae-64a3-4b00-9fea-b9253dd3c5cd
200 OK 49 B URL HTTP/2 ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=39&tpuid=646063ae-64a3-4b00-9fea-b9253dd3c5cd
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /sium/429371437437189942/1437437190794/0/img?tpid=39&tpuid=646063ae-64a3-4b00-9fea-b9253dd3c5cd HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 04:10:10 GMT
content-type: image/gif
content-length: 49
set-cookie: tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
cct=1672373410138; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
uu=4402e4da18d148c5aaf1d23272de99b5; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
track.adform.net/serving/cookie/match/?CC=1&party=9&uid=8d7c7dd30225af67c9f3de0506194ed89aba5087e1a703f21c854b74b43e8297&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F05bcf3bc7ff445b39f97ef6acadf4446%2F1672373409730%2F266%2Fimg
200 OK 35 B URL HTTP/2 track.adform.net/serving/cookie/match/?CC=1&party=9&uid=8d7c7dd30225af67c9f3de0506194ed89aba5087e1a703f21c854b74b43e8297&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F05bcf3bc7ff445b39f97ef6acadf4446%2F1672373409730%2F266%2Fimg
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /serving/cookie/match/?CC=1&party=9&uid=8d7c7dd30225af67c9f3de0506194ed89aba5087e1a703f21c854b74b43e8297&tpid=42&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F05bcf3bc7ff445b39f97ef6acadf4446%2F1672373409730%2F266%2Fimg HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:10 GMT
content-type: image/gif
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Cache-Control,Accept-Encoding,X-Requested-With
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: no-cache, no-store, must-revalidate, no-transform
expires: -1
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
x.bidswitch.net/ul_cb/sync?ssp=adscale&uid=cb68ed237f4820621958690b8c94b1998a86ce134a7ef73d2c7a36e22604e803&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F05bcf3bc7ff445b39f97ef6acadf4446%2F1672373409730%2F439%2Fimg
302 Found 0 B URL HTTP/2 x.bidswitch.net/ul_cb/sync?ssp=adscale&uid=cb68ed237f4820621958690b8c94b1998a86ce134a7ef73d2c7a36e22604e803&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F05bcf3bc7ff445b39f97ef6acadf4446%2F1672373409730%2F439%2Fimg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ul_cb/sync?ssp=adscale&uid=cb68ed237f4820621958690b8c94b1998a86ce134a7ef73d2c7a36e22604e803&tpid=57&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F05bcf3bc7ff445b39f97ef6acadf4446%2F1672373409730%2F439%2Fimg HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Fri, 30 Dec 2022 04:10:10 GMT
content-length: 0
cache-control: no-cache, no-store, must-revalidate
location: //ih.adscale.de/adscale-ih/sium?tpid=57&tpuid=0&gdpr=&gdpr_consent=
X-Firefox-Spdy: h2
ih.adscale.de/adscale-ih/sium?tpid=57&tpuid=0&gdpr=&gdpr_consent=
200 OK 49 B URL HTTP/2 ih.adscale.de/adscale-ih/sium?tpid=57&tpuid=0&gdpr=&gdpr_consent=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /adscale-ih/sium?tpid=57&tpuid=0&gdpr=&gdpr_consent= HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 04:10:10 GMT
content-type: image/gif
content-length: 49
set-cookie: cct=1672373410295; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
uu=c0abd9d1ef0d48b5afa48aac5ae32d29; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
sync.mathtag.com/sync/img?mt_exid=26&redir=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D108%26tpuid%3D%5BMM_UUID%5D&uid=46dcde7d838717b30f8ce7a275f595bb7981271dd26a6c4f0da20f8621f1400f&tpid=108&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F05bcf3bc7ff445b39f97ef6acadf4446%2F1672373409730%2F540%2Fimg
302 Moved Temporarily 0 B URL HTTP/1.1 sync.mathtag.com/sync/img?mt_exid=26&redir=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D108%26tpuid%3D%5BMM_UUID%5D&uid=46dcde7d838717b30f8ce7a275f595bb7981271dd26a6c4f0da20f8621f1400f&tpid=108&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F05bcf3bc7ff445b39f97ef6acadf4446%2F1672373409730%2F540%2Fimg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/img?mt_exid=26&redir=https%3A%2F%2Fih.adscale.de%2Fsium%2F429371437437189942%2F1437437190794%2F0%2Fimg%3Ftpid%3D108%26tpuid%3D%5BMM_UUID%5D&uid=46dcde7d838717b30f8ce7a275f595bb7981271dd26a6c4f0da20f8621f1400f&tpid=108&cburl=https%3A%2F%2Fih.adscale.de%2Fsium%2F05bcf3bc7ff445b39f97ef6acadf4446%2F1672373409730%2F540%2Fimg HTTP/1.1
Host: sync.mathtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Fri, 30 Dec 2022 04:10:10 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=360
Access-Control-Allow-Origin: *
Server: MT3 277 3f0ad7a master zrh-pixel-x1 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: uuid=5df463ae-64a3-4800-bf49-2ad82f80fd55; domain=.mathtag.com; path=/; expires=Sat, 27-Jan-2024 04:10:11 GMT; SameSite=None; Secure
location: https://ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=108&tpuid=5df463ae-64a3-4800-bf49-2ad82f80fd55
Expires: Fri, 30 Dec 2022 04:10:09 GMT
ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=108&tpuid=5df463ae-64a3-4800-bf49-2ad82f80fd55
200 OK 49 B URL HTTP/2 ih.adscale.de/sium/429371437437189942/1437437190794/0/img?tpid=108&tpuid=5df463ae-64a3-4800-bf49-2ad82f80fd55
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 84b2ea0a1b15c9df50f689927ac608c2
558dfd200dee9a36255c6d32840b354566124c76
68986dd8f1ef6b05cbc0a2f532b87ea2f93ebe9ccd06f8265b15044dd1f4ab17
GET /sium/429371437437189942/1437437190794/0/img?tpid=108&tpuid=5df463ae-64a3-4800-bf49-2ad82f80fd55 HTTP/1.1
Host: ih.adscale.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ih.adscale.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 04:10:10 GMT
content-type: image/gif
content-length: 49
set-cookie: cct=1672373410367; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
tu=4#0#; Max-Age=31336000; Domain=ih.adscale.de; Path=/; Secure; SameSite=None
uu=3990be3ac3b2474bbed193eaa2f036f0; Max-Age=31336000; Domain=.adscale.de; Path=/; Secure; SameSite=None
p3p: CP=NOI PSA OUR
X-Firefox-Spdy: h2
ulozto.cz/file-tracking/6cee961211e77f088dbdc417fe2d8d489066bacfaf83df7c02063b3de03275cd08adb6d45ac81c99a8a6728562f11bac?q=smash++hits+-+1988.rar
301 Moved Permanently 0 B URL HTTP/2 ulozto.cz/file-tracking/6cee961211e77f088dbdc417fe2d8d489066bacfaf83df7c02063b3de03275cd08adb6d45ac81c99a8a6728562f11bac?q=smash++hits+-+1988.rar
IP
ASN #16019 Vodafone Czech Republic a.s.
GET /file-tracking/6cee961211e77f088dbdc417fe2d8d489066bacfaf83df7c02063b3de03275cd08adb6d45ac81c99a8a6728562f11bac?q=smash++hits+-+1988.rar HTTP/1.1
Host: ulozto.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 30 Dec 2022 04:10:05 GMT
content-type: text/html; charset=utf-8
x-frame-options: SAMEORIGIN
set-cookie: _nss=1; path=/; secure; HttpOnly; SameSite=Strict
ULOSESSID=s5jhn162goa2le7rdmlhta3tkq; expires=Fri, 13-Jan-2023 04:10:04 GMT; Max-Age=1209600; path=/; domain=.ulozto.cz; secure; HttpOnly; SameSite=Lax
uloztoid=1468898016; expires=Sat, 30-Dec-2023 04:10:05 GMT; Max-Age=31536000; path=/; domain=ulozto.cz; secure; SameSite=None
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: X-Requested-With
location: https://ulozto.cz/file/BVj6mjAC/smash-hits-1988-2009-eds-rar?q=smash++hits+-+1988.rar#!ZGEwAGR2ZJSzLJMyZGSyLGOxATRkAxAOnz0lDHgxsaqApwV0AD==
x-node-name: ulozto9
X-Firefox-Spdy: h2
static.uloz.to/ul3/css/style-extra-file-search.css?v=3.300.355
200 OK 0 B URL HTTP/2 static.uloz.to/ul3/css/style-extra-file-search.css?v=3.300.355
IP
ASN #16019 Vodafone Czech Republic a.s.
GET /ul3/css/style-extra-file-search.css?v=3.300.355 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:05 GMT
content-type: text/css
last-modified: Tue, 20 Dec 2022 10:36:47 GMT
etag: W/"63a1903f-13419"
expires: Fri, 30 Dec 2022 16:10:05 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
bbnaut.ibillboard.com/g/co
200 OK 0 B URL HTTP/2 bbnaut.ibillboard.com/g/co
IP
ASN #13036 T-Mobile Czech Republic a.s.
GET /g/co HTTP/1.1
Host: bbnaut.ibillboard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:06 GMT
content-type: text/javascript
expires: Sat, 31 Dec 2022 04:10:06 GMT
cache-control: max-age=86400, private
X-Firefox-Spdy: h2
static.uloz.to/javascript/darkMode.js?v=3.300.355
200 OK 0 B URL HTTP/2 static.uloz.to/javascript/darkMode.js?v=3.300.355
IP
ASN #16019 Vodafone Czech Republic a.s.
GET /javascript/darkMode.js?v=3.300.355 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:05 GMT
content-type: application/x-javascript
last-modified: Mon, 19 Dec 2022 15:03:35 GMT
etag: W/"63a07d47-9c2"
expires: Fri, 30 Dec 2022 16:10:05 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
static.uloz.to/javascript/ulozto.min.js?v=3.300.355
200 OK 0 B URL HTTP/2 static.uloz.to/javascript/ulozto.min.js?v=3.300.355
IP
ASN #16019 Vodafone Czech Republic a.s.
GET /javascript/ulozto.min.js?v=3.300.355 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:05 GMT
content-type: application/x-javascript
last-modified: Tue, 20 Dec 2022 10:36:47 GMT
etag: W/"63a1903f-47fe7"
expires: Fri, 30 Dec 2022 16:10:05 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
ulozto.cz/announcement/view?id=358&source=news
200 OK 0 B URL HTTP/2 ulozto.cz/announcement/view?id=358&source=news
IP
ASN #16019 Vodafone Czech Republic a.s.
GET /announcement/view?id=358&source=news HTTP/1.1
Host: ulozto.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://ulozto.cz/file/BVj6mjAC/smash-hits-1988-2009-eds-rar
Cookie: _nss=1; ULOSESSID=s5jhn162goa2le7rdmlhta3tkq; uloztoid=1468898016; uloztoid2=1468898016; skin-switcher-selection=light; abtest=0; _ga_L4S9E2Y7WN=GS1.1.1672373400.1.0.1672373400.0.0.0; _ga=GA1.2.453699715.1672373401; _pk_id.1.c238=f5c4ef1b8c965f0a.1672373401.; _pk_ses.1.c238=1; _gid=GA1.2.267172430.1672373401
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:06 GMT
content-type: application/json; charset=utf-8
x-frame-options: SAMEORIGIN
set-cookie: _nss=1; path=/; secure; HttpOnly; SameSite=Strict
ULOSESSID=s5jhn162goa2le7rdmlhta3tkq; expires=Fri, 13-Jan-2023 04:10:06 GMT; Max-Age=1209600; path=/; domain=.ulozto.cz; secure; HttpOnly; SameSite=Lax
uloztoid=1468898016; expires=Sat, 30-Dec-2023 04:10:06 GMT; Max-Age=31536000; path=/; domain=ulozto.cz; secure; SameSite=None
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: X-Requested-With
x-node-name: ulozto7
content-encoding: gzip
X-Firefox-Spdy: h2
advert.uloz.to/ads/ad-1686.html?logged=0&page=file%2FBVj6mjAC%2Fsmash-hits-1988-2009-eds-rar%3Fq%3Dsmash%2520%2520hits%2520-%25201988.rar&origin=ulozto.cz&adult=0&hide_video=0
200 OK 0 B URL HTTP/2 advert.uloz.to/ads/ad-1686.html?logged=0&page=file%2FBVj6mjAC%2Fsmash-hits-1988-2009-eds-rar%3Fq%3Dsmash%2520%2520hits%2520-%25201988.rar&origin=ulozto.cz&adult=0&hide_video=0
IP
ASN #16019 Vodafone Czech Republic a.s.
GET /ads/ad-1686.html?logged=0&page=file%2FBVj6mjAC%2Fsmash-hits-1988-2009-eds-rar%3Fq%3Dsmash%2520%2520hits%2520-%25201988.rar&origin=ulozto.cz&adult=0&hide_video=0 HTTP/1.1
Host: advert.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:09 GMT
content-type: text/html; charset=UTF-8
last-modified: Wed, 01 Jun 2016 10:35:03 GMT
etag: W/"574eba57-165"
x-node-name: static1
content-encoding: gzip
X-Firefox-Spdy: h2
bbnaut.ibillboard.com/match/AdScale?partneruid=1948726f19a64f0d9387402610652510
200 OK 0 B URL HTTP/2 bbnaut.ibillboard.com/match/AdScale?partneruid=1948726f19a64f0d9387402610652510
IP
ASN #13036 T-Mobile Czech Republic a.s.
GET /match/AdScale?partneruid=1948726f19a64f0d9387402610652510 HTTP/1.1
Host: bbnaut.ibillboard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ih.adscale.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:10 GMT
content-type: image/gif
cache-control: private, max-age=86400
access-control-allow-credentials: true
X-Firefox-Spdy: h2
bbnaut.ibillboard.com/initidmatch?force=1&gdpr=1&gdpr_consent=null
200 OK 0 B URL HTTP/2 bbnaut.ibillboard.com/initidmatch?force=1&gdpr=1&gdpr_consent=null
IP
ASN #13036 T-Mobile Czech Republic a.s.
GET /initidmatch?force=1&gdpr=1&gdpr_consent=null HTTP/1.1
Host: bbnaut.ibillboard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:06 GMT
content-type: text/javascript
cache-control: private, max-age=3600
access-control-allow-credentials: true
X-Firefox-Spdy: h2
static.uloz.to/javascript/lib/modernizr.js?v=3.300.355
200 OK 0 B URL HTTP/2 static.uloz.to/javascript/lib/modernizr.js?v=3.300.355
IP
ASN #16019 Vodafone Czech Republic a.s.
GET /javascript/lib/modernizr.js?v=3.300.355 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:05 GMT
content-type: application/x-javascript
last-modified: Mon, 19 Dec 2022 15:03:35 GMT
etag: W/"63a07d47-d52"
expires: Fri, 30 Dec 2022 16:10:05 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
bbnaut.bbelements.com/s/co/BBID-01-03470874071277451-16801344?gdpr=1&gdpr_consent=null
200 OK 0 B URL HTTP/2 bbnaut.bbelements.com/s/co/BBID-01-03470874071277451-16801344?gdpr=1&gdpr_consent=null
IP
ASN #13036 T-Mobile Czech Republic a.s.
GET /s/co/BBID-01-03470874071277451-16801344?gdpr=1&gdpr_consent=null HTTP/1.1
Host: bbnaut.bbelements.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:07 GMT
content-type: text/html
cache-control: private, max-age=3600
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
ulozto.cz/announcement/view?id=366&source=news
200 OK 0 B URL HTTP/2 ulozto.cz/announcement/view?id=366&source=news
IP
ASN #16019 Vodafone Czech Republic a.s.
GET /announcement/view?id=366&source=news HTTP/1.1
Host: ulozto.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://ulozto.cz/file/BVj6mjAC/smash-hits-1988-2009-eds-rar
Cookie: _nss=1; ULOSESSID=s5jhn162goa2le7rdmlhta3tkq; uloztoid=1468898016; uloztoid2=1468898016; skin-switcher-selection=light; abtest=0; _ga_L4S9E2Y7WN=GS1.1.1672373400.1.0.1672373400.0.0.0; _ga=GA1.2.453699715.1672373401; _pk_id.1.c238=f5c4ef1b8c965f0a.1672373401.; _pk_ses.1.c238=1; _gid=GA1.2.267172430.1672373401; _dc_gtm_UA-205967-8=1; ibbid=BBID-01-03470874071277451-16801344; adblock_detected=false
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:11 GMT
content-type: application/json; charset=utf-8
x-frame-options: SAMEORIGIN
set-cookie: _nss=1; path=/; secure; HttpOnly; SameSite=Strict
ULOSESSID=s5jhn162goa2le7rdmlhta3tkq; expires=Fri, 13-Jan-2023 04:10:11 GMT; Max-Age=1209600; path=/; domain=.ulozto.cz; secure; HttpOnly; SameSite=Lax
uloztoid=1468898016; expires=Sat, 30-Dec-2023 04:10:11 GMT; Max-Age=31536000; path=/; domain=ulozto.cz; secure; SameSite=None
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: X-Requested-With
x-node-name: ulozto1
content-encoding: gzip
X-Firefox-Spdy: h2
advert.uloz.to/ads/ad-6764.html?logged=0&page=file%2FBVj6mjAC%2Fsmash-hits-1988-2009-eds-rar%3Fq%3Dsmash%2520%2520hits%2520-%25201988.rar&origin=ulozto.cz&adult=0&hide_video=0
200 OK 0 B URL HTTP/2 advert.uloz.to/ads/ad-6764.html?logged=0&page=file%2FBVj6mjAC%2Fsmash-hits-1988-2009-eds-rar%3Fq%3Dsmash%2520%2520hits%2520-%25201988.rar&origin=ulozto.cz&adult=0&hide_video=0
IP
ASN #16019 Vodafone Czech Republic a.s.
GET /ads/ad-6764.html?logged=0&page=file%2FBVj6mjAC%2Fsmash-hits-1988-2009-eds-rar%3Fq%3Dsmash%2520%2520hits%2520-%25201988.rar&origin=ulozto.cz&adult=0&hide_video=0 HTTP/1.1
Host: advert.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:09 GMT
content-type: text/html; charset=UTF-8
last-modified: Mon, 29 Oct 2018 13:49:25 GMT
etag: W/"5bd70fe5-99b"
x-node-name: static1
content-encoding: gzip
X-Firefox-Spdy: h2
megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/style.css
200 OK 0 B URL HTTP/2 megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/style.css
IP
ASN #16019 Vodafone Czech Republic a.s.
GET /ulozto_ads/ulozto_ads_1/ads/style.css HTTP/1.1
Host: megadarky.ic.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megadarky.ic.cz/ulozto_ads/ulozto_ads_1/ads/ad15.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:47 GMT
content-type: text/css
last-modified: Fri, 12 Feb 2021 05:02:24 GMT
cache-control: max-age=604800
expires: Fri, 06 Jan 2023 04:10:47 GMT
etag: W/"60260be0-555"
content-encoding: br
X-Firefox-Spdy: h2
ulozto.cz/file/BVj6mjAC/smash-hits-1988-2009-eds-rar?q=smash++hits+-+1988.rar
200 OK 0 B URL HTTP/2 ulozto.cz/file/BVj6mjAC/smash-hits-1988-2009-eds-rar?q=smash++hits+-+1988.rar
IP
ASN #16019 Vodafone Czech Republic a.s.
GET /file/BVj6mjAC/smash-hits-1988-2009-eds-rar?q=smash++hits+-+1988.rar HTTP/1.1
Host: ulozto.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _nss=1; ULOSESSID=s5jhn162goa2le7rdmlhta3tkq; uloztoid=1468898016
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:05 GMT
content-type: text/html; charset=utf-8
x-frame-options: SAMEORIGIN
set-cookie: _nss=1; path=/; secure; HttpOnly; SameSite=Strict
ULOSESSID=s5jhn162goa2le7rdmlhta3tkq; expires=Fri, 13-Jan-2023 04:10:05 GMT; Max-Age=1209600; path=/; domain=.ulozto.cz; secure; HttpOnly; SameSite=Lax
uloztoid2=1468898016; expires=Sat, 30-Dec-2023 04:10:05 GMT; Max-Age=31536000; path=/; domain=ulozto.cz; secure; SameSite=None
uloztoid=1468898016; expires=Sat, 30-Dec-2023 04:10:05 GMT; Max-Age=31536000; path=/; domain=ulozto.cz; secure; SameSite=None
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: X-Requested-With
x-node-name: ulozto4
content-encoding: gzip
X-Firefox-Spdy: h2
static.uloz.to/ul3/css/style-extra-file-detail.css?v=3.300.355
200 OK 0 B URL HTTP/2 static.uloz.to/ul3/css/style-extra-file-detail.css?v=3.300.355
IP
ASN #16019 Vodafone Czech Republic a.s.
GET /ul3/css/style-extra-file-detail.css?v=3.300.355 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:05 GMT
content-type: text/css
last-modified: Tue, 20 Dec 2022 10:36:47 GMT
etag: W/"63a1903f-3d15"
expires: Fri, 30 Dec 2022 16:10:05 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
bbnaut.ibillboard.com/s/co/BBID-01-03470874071277451-16801344?gdpr=1&gdpr_consent=null
200 OK 0 B URL HTTP/2 bbnaut.ibillboard.com/s/co/BBID-01-03470874071277451-16801344?gdpr=1&gdpr_consent=null
IP
ASN #13036 T-Mobile Czech Republic a.s.
GET /s/co/BBID-01-03470874071277451-16801344?gdpr=1&gdpr_consent=null HTTP/1.1
Host: bbnaut.ibillboard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:07 GMT
content-type: text/html
cache-control: private, max-age=3600
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
bbnaut.ibillboard.com/g/njs/01
200 OK 0 B URL HTTP/2 bbnaut.ibillboard.com/g/njs/01
IP
ASN #13036 T-Mobile Czech Republic a.s.
GET /g/njs/01 HTTP/1.1
Host: bbnaut.ibillboard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ulozto.cz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:07 GMT
content-type: text/javascript
cache-control: private
expires: Mon, 27 Dec 2032 04:10:07 GMT
access-control-allow-credentials: true
X-Firefox-Spdy: h2
static.uloz.to/javascript/advertFrame.min.js?v=3.300.204
200 OK 0 B URL HTTP/2 static.uloz.to/javascript/advertFrame.min.js?v=3.300.204
IP
ASN #16019 Vodafone Czech Republic a.s.
GET /javascript/advertFrame.min.js?v=3.300.204 HTTP/1.1
Host: static.uloz.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advert.uloz.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 04:10:09 GMT
content-type: application/x-javascript
last-modified: Tue, 20 Dec 2022 10:36:47 GMT
etag: W/"63a1903f-1ab38"
expires: Fri, 30 Dec 2022 16:10:09 GMT
cache-control: max-age=43200
x-node-name: static1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
93.99.2.80
142.250.74.110
104.18.33.19
23.36.77.32
93.184.220.29
3.74.25.218
37.157.2.234