Hybernia.eu - Booking.hybernia.eu

server: nginx
date: Sun, 16 Nov 2025 07:21:21 GMT
content-type: text/html; charset=utf-8
content-length: 147
location: https://www.colosseumticket.cz
cache-control: public, no-store, max-age=0
expires: Sun, 16 Nov 2025 07:21:21 GMT
last-modified: Sun, 16 Nov 2025 07:21:21 GMT
vary: *
set-cookie: ASP.NET_SessionId=quludzcl3fp0idhjdcrtsgx2; path=/; secure; HttpOnly; SameSite=None
x-aspnetmvc-version: 5.2
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: POST,GET,DELETE,OPTIONS
access-control-allow-credentials: true
access-control-allow-origin: 
referrer-policy: no-referrer-when-downgrade

HTTP/2 302 
server: nginx/1.27.4
date: Sun, 16 Nov 2025 07:21:21 GMT
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
permissions-policy: geolocation=self, notifications=self, push=self, sync-xhr=self, speaker=self, vibrate=self, fullscreen=self
strict-transport-security: max-age=31536000; includeSubDomains; preload
location: /cs
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,token,x-security-token
access-control-expose-headers: Content-Length,Content-Range
content-security-policy: upgrade-insecure-requests
last-modified: Sunday, 16-Nov-2025 07:21:21 GMT
cache-control: no-store, no-cache, stale-while-revalidate, proxy-revalidate, max-age=1

HTTP/2 200 
server: nginx/1.27.4
date: Sun, 16 Nov 2025 07:21:21 GMT
content-type: text/html; charset=utf-8
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
permissions-policy: geolocation=self, notifications=self, push=self, sync-xhr=self, speaker=self, vibrate=self, fullscreen=self
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-nextjs-cache: STALE
cache-control: s-maxage=1, stale-while-revalidate
etag: "xxdik6xcub3nu10"
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,token,x-security-token
access-control-expose-headers: Content-Length,Content-Range
content-security-policy: upgrade-insecure-requests
last-modified: Sunday, 16-Nov-2025 07:21:21 GMT
cache-control: no-store, no-cache, stale-while-revalidate, proxy-revalidate, max-age=1