firmy.cz Review

 N/A

HTTP/1.1 301 Moved Permanently
location: https://firmy.cz/
date: Thu, 21 Aug 2025 01:48:09 GMT
server: envoy
content-length: 0

HTTP/1.1 301 Moved Permanently
server: envoy
date: Thu, 21 Aug 2025 01:48:10 GMT
content-type: text/html
content-length: 169
location: https://www.firmy.cz/
x-envoy-upstream-service-time: 2
set-cookie: sznlbr=2f5deebe7c76a2d858f300b5a6a8fb336fa05c32365b3b30ccb2002d3d04e083; HttpOnly; Secure; Max-Age=86400; Path=/

HTTP/1.1 302 Found
server: envoy
date: Thu, 21 Aug 2025 01:48:11 GMT
content-type: text/html
content-length: 145
expires: 0
cache-control: no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
location: https://login.szn.cz/api/v1/autologin?service=firmy&return_url=https%3A%2F%2Fwww.firmy.cz%2F%3Fnoredirect%3D1
vary: *
x-envoy-upstream-service-time: 9
set-cookie: last-redirect=1; Domain=.www.firmy.cz; Path=/; Max-Age=900; SameSite=None; Secure
set-cookie: sznlbr=c4cf625f356ab1f076dd9aff25c33feea36f90e841b76b502329ad42e2c8d50d; HttpOnly; Secure; Max-Age=86400; Path=/

HTTP/1.1 302 FOUND
Server: nginx
Date: Thu, 21 Aug 2025 01:48:12 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 255
Connection: keep-alive
Location: https://www.firmy.cz/?noredirect=1
Vary: Cookie
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Set-Cookie: user-flags=; Domain=szn.cz; Expires=Tue, 20 Aug 2030 01:48:12 GMT; Max-Age=157680000; Secure; Path=/
Set-Cookie: lps=eyJfZnJlc2giOmZhbHNlLCJfcGVybWFuZW50Ijp0cnVlfQ.aKZ63A.mEsWAQd2zplj6kMeegzYFjNWw0g; Domain=szn.cz; Expires=Sun, 21 Sep 2025 01:48:12 GMT; Secure; HttpOnly; Path=/
X-FRAME-OPTIONS: DENY

HTTP/1.1 200 OK
server: envoy
date: Thu, 21 Aug 2025 01:48:13 GMT
content-type: text/html; charset=utf-8
content-security-policy: script-src-attr 'self' *.seznam.cz *.szn.cz *.dszn.cz *.imedia.cz *.sdn.cz;script-src 'self' 'unsafe-inline' 'unsafe-eval' chat.firmy.cz *.sdn.cz *.hotjar.com *.mapy.cz *.mapy.com gacz.hit.gemius.pl scz.hit.gemius.pl https://www.googletagmanager.com/gtag/js *.adform.net *.adnxs-simple.com *.adsafeprotected.com *.consensu.org *.doubleverify.com *.googletagservices.com *.im.cz *.imedia.cz *.pliing.com *.pubmatic.com *.smartlook.com *.smartlook.cloud *.post.cz *.seznam.cz *.szn.cz *.dszn.cz *.adform.net *.adnxs.com *.adnxs-simple.com *.adsafeprotected.com *.consensu.org *.doubleclick.net *.doubleverify.com *.googlesyndication.com *.googletagservices.com *.im.cz *.imedia.cz *.imedia.dev.dszn.cz *.pliing.com *.pubmatic.com *.sbeta.cz *.sdn.szn.cz *.serving-sys.com *.seznam.cz *.sklik.cz ads.celtra.com *.2mdn.net ams.creativecdn.com cdn.id5-sync.com tags.crwdcntrl.net id5-sync.com/gm/v3 dis.criteo.com tracker.adnami.io script.adnami.io macro.adnami.io assets.adnami.io functions.adnami.io directive.adnami.io rmb.adnami.io;img-src 'self' blob: data: *.sdn.cz *.im.cz *.firmy.cz *.seznam.cz *.sbazar.cz *.szn.cz *.mapy.cz *.mapy.com *.kupi.cz *.post.cz *.google-analytics.com *.googletagmanager.com *.bstatic.com *.hotjar.com *.dszn.cz *.tenor.com;frame-ancestors 'self' *.sdn.cz *.firmy.cz *.hotjar.com *.dszn.cz;frame-src 'self' *.sdn.cz *.firmy.cz *.hotjar.com *.seznam.cz *.pubmatic.com *.adnxs.com *.gemius.pl *.apetee.com *.im.cz *.dszn.cz *.imedia.cz *.criteo.com;connect-src 'self' 'unsafe-inline' 'unsafe-eval' wss: *.firmy.cz *.hotjar.com *.hotjar.io *.seznam.cz *.szn.cz *.sdn.cz *.sznplayer.cz *.mapy.cz *.mapy.com *.post.cz *.google-analytics.com *.smartlook.cloud *.sklik.cz *.dszn.cz *.googleapis.com *.tenor.com *.bstatic.com id5-sync.com/gm/v3 *.imedia.cz;media-src 'self' blob: *.sdn.cz *.dszn.cz;default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';object-src 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
x-dns-prefetch-control: off
expect-ct: max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
x-xss-protection: 0
etag: W/"839c2-PsxP++kO0hKx5epILv+to+gH+zU"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 326
set-cookie: experimentRandom=rand=50&created=1755740892; Max-Age=31543199; Domain=firmy.cz; Path=/; Expires=Fri, 21 Aug 2026 03:48:12 GMT; Secure; SameSite=Lax
set-cookie: qt=:EkaUS-V_4-yvBFBghvu2; Domain=firmy.cz; Path=/; Secure; SameSite=Lax
set-cookie: sznlbr=de585900f597d93f1c2e4ebe85fbda393310cd6837aa836f1d0a6674599ef28b; HttpOnly; Secure; Max-Age=86400; Path=/
transfer-encoding: chunked