haar-shop.ch Review

 N/A

HTTP/1.1 301 Moved Permanently
Date: Mon, 25 Aug 2025 01:30:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://haar-shop.ch/
X-Content-Type-Options: nosniff
Vary: accept-encoding
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=h3oSJpoJTuEjUxjbacBlizk29nzyki5U%2Fa1amrfHph0AF%2BT9khIGpl5u%2BXkCo7gMYd6IPOVuP0UVF2999qU0%2BHzdZjwdJIfGqJNy"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9747539efe90af42-NRT
alt-svc: h3=":443"; ma=86400

HTTP/1.1 301 Moved Permanently
Date: Mon, 25 Aug 2025 01:30:54 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Location: https://www.haar-shop.ch
X-Cached-At: Mon, 25 Aug 2025 00:47:46 GMT
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=cc1SwTleCH8lRlICE50OEgAV1jLIdxA9WwNr02U6QsQ2q75SXDmYk1J%2B%2Ft%2Fd4KYa0hP7xq5VOYyfKhJ6KTvOSiyd2rvtVVTH9P9X"}]}
X-Magento-Cache-Debug: HIT
Server-Timing: cache-status;desc=HIT
Server-Timing: upstream-response-time;dur=0815
Vary: Accept-Encoding, Origin
Strict-Transport-Security: max-age=15552000
X-Content-Type-Options: nosniff
Cf-Cache-Status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9747539f794e8136-KIX
alt-svc: h3=":443"; ma=86400

HTTP/1.1 200 OK
Date: Mon, 25 Aug 2025 01:30:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Pragma: cache
Report-To: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https:\/\/www.haar-shop.ch\/de\/csp\/report\/"}]}
Content-Security-Policy-Report-Only: font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cdn.findologic.com *.fontawesome.com 'self' data: https://widgets.trustedshops.com cdn.haarshop.ch data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.nosto.com *.nos.to 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com cdn.haarshop.ch 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.googletagmanager.com/ *.haar-shop.ch *.hs-dev.ch www.sovendus-connect.com experience-io.oralb.de *.nosto.com *.nos.to www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.facebook.com js.mollie.com https://app-wallee.com cdn.haarshop.ch *.pinterest.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.google.ch integrations.etrusted.com rt.flix360.com media.flixcar.com *.google.de d21m4dsqdd3b9h.cloudfront.net d2rfa446ja7yzb.cloudfront.net *.nosto.com *.nos.to www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cdninstagram.com https://www.mollie.com *.hsforms.net *.hsforms.com 'self' data: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://app-wallee.com cdn.haarshop.ch bat.bing.com *.trustedshops.com *.google.com *.google.pl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ gmtech.mfgroup.ch ajax.cloudflare.com *.findologic.com media.flixcar.com media.flixfacts.com connect.getflowbox.com *.googleapis.com *.hotjar.com api.sovendus.com nosto.stackla.com static.zdassets.com prod.flixgvid.flix360.io cdn.jsdelivr.net *.nosto.com *.nos.to *.plugins.emarsys.net *.scarabresearch.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com player.vimeo.com *.googleoptimize.com cdnjs.cloudflare.com js.mollie.com *.hsforms.net *.hsforms.com *.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com https://app-wallee.com https://gmtech.mfgroup.ch https://assets.secure.checkout.visa.com cdn.haarshop.ch *.pinterest.com bat.bing.com *.tiktok.com s.pinimg.com unpkg.com *.cloudflareinsights.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com integrations.etrusted.com cdn.findologic.com *.nosto.com *.nos.to *.fontawesome.com *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com https://app-wallee.com cdn.haarshop.ch 'self' 'unsafe-inline'; object-src cdn.haarshop.ch 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ static.zdassets.com cdn.haarshop.ch 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ gmtech.mfgroup.ch *.findologic.com media.flixcar.com *.getflowbox.com *.googleapis.com ws: ws.hotjar.com identification-api.sovendus.com ekr.zdassets.com *.zendesk.com *.findologic.io *.hotjar.io *.nosto.com *.nos.to *.scarabresearch.com *.eservice.emarsys.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://app-wallee.com https://assets.secure.checkout.visa.com cdn.haarshop.ch *.google.pl region1.analytics.google.com bat.bing.com googleads.g.doubleclick.net *.pinterest.com *.tiktok.com unpkg.com *.cloudflareinsights.com cloudflareinsights.com www.google.ch 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com cdn.haarshop.ch 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.haar-shop.ch/de/csp/report/; report-to report-endpoint;
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Cached-At: Sun, 24 Aug 2025 23:17:28 GMT
X-Magento-Cache-Debug: HIT
Server-Timing: cache-status;desc=HIT
Server-Timing: upstream-response-time;dur=1134
Cache-Control: public, max-age=60
Expires: Mon, 25 Aug 2025 01:31:56 GMT
Vary: Accept-Encoding, Origin
Strict-Transport-Security: max-age=15552000
Cf-Cache-Status: DYNAMIC
Content-Encoding: br
CF-RAY: 974753aeaec825e7-NRT
alt-svc: h3=":443"; ma=86400