Lensdealer.com

server: nginx
date: Wed, 12 Nov 2025 13:34:06 GMT
content-type: text/html
content-length: 162
location: https://www.lensdealer.com/

HTTP/2 200 
server: nginx
date: Wed, 12 Nov 2025 13:34:07 GMT
content-type: text/html; charset=UTF-8
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
content-security-policy: report-uri https://www.lensdealer.com/csp-report;base-uri 'self';connect-src 'self' *.google.de google.com *.google.com *.google.nl www.google.at www.google.hr www.google.com www.google.co.uk www.google.com.ua www.google.pt www.google.fr www.google.co.jp www.google.co.in www.google.ch www.google.com.tr www.google.ba www.google.dk www.google.be www.google.cz www.google.co.th www.google.com.sg www.google.it www.google.lt www.google.es www.google.ae www.google.gr www.google.lu www.google.pl www.google.al www.google.se www.google.bg www.google.rs www.google.com.lb www.google.com.hk www.google.com.mx www.google.com.eg www.google.com.gt www.googletagmanager.com *.googleapis.com *.google-analytics.com www.googleadservices.com *.googlesyndication.com *.doubleclick.net stats.g.doubleclick.net *.trustedshops.com *.etrusted.com *.algolia.io *.algolia.net *.algolianet.com *.usercentrics.eu v1.api.service.cmp.usercentrics.eu *.facebook.com connect.facebook.net properties *.hotjar.com wss://*.hotjar.com *.hotjar.io app.guidly.de;default-src 'self' secure.pay1.de *.facebook.com;form-action 'self' *.pay1.de *.paypal.com *.sofort.com www.facebook.com;img-src 'self' data: *.google.de *.google.com www.google.com www.google.at www.google.co.uk www.google.hr www.google.com.ua www.google.pt www.google.fr www.google.co.jp www.google.co.in www.google.ch www.google.com.tr www.google.ba www.google.dk www.google.be www.google.co.th www.google.cz www.google.com.sg www.google.it www.google.lt www.google.es www.google.ae www.google.gr www.google.lu www.google.pl www.google.al www.google.se www.google.bg www.google.rs www.google.com.lb www.google.com.hk www.google.com.mx www.google.com.eg www.google.com.gt *.google.nl *.gstatic.com www.googletagmanager.com *.googleapis.com www.googleadservices.com *.googleusercontent.com *.googlesyndication.com *.doubleclick.net googleads.g.doubleclick.net *.trustedshops.com *.etrusted.com *.usercentrics.eu www.facebook.com *.facebook.com *.facebook.net *.meinelinse.de;media-src 'self';object-src 'none';font-src 'self' data: *.typekit.net *.gstatic.com cdn.scite.ai *.trustedshops.com fonts.bunny.net app.guidly.de;script-src 'self' www.google.com www.googletagmanager.com gstatic.com *.googleapis.com googleads.g.doubleclick.net *.trustedshops.com *.etrusted.com *.usercentrics.eu 'unsafe-eval' 'unsafe-inline' *.facebook.net;script-src-elem 'self' secure.pay1.de www.googletagmanager.com *.googletagmanager.com *.googleapis.com *.googlesyndication.com www.gstatic.com googleads.g.doubleclick.net *.doubleclick.net *.trustedshops.com *.etrusted.com integrations.etrusted.com widgets.trustedshops.com *.fittingbox.com *.usercentrics.eu app.usercentrics.eu 'unsafe-inline' *.facebook.net connect.facebook.net *.hotjar.com app.guidly.de;style-src 'self' 'unsafe-inline' *.typekit.net fonts.googleapis.com www.gstatic.com *.trustedshops.com *.etrusted.com fonts.bunny.net app.guidly.de;style-src-attr 'unsafe-inline';frame-src www.youtube.com secure.pay1.de www.googletagmanager.com www.google.com *.doubleclick.net *.fittingbox.com *.usercentrics.eu www.facebook.com;worker-src blob;upgrade-insecure-requests;block-all-mixed-content
set-cookie: lensdealer_session=eyJpdiI6IkkvMFlXVnFCZ1A4cVgwOEFlWG1VeGc9PSIsInZhbHVlIjoicTdrWUg3ZDNiNTZabk9mZWJBTktUWHdFZzAzMUpiZU5vY3k4NzVOdEtkSlFTWkFIRkhrSldzdjNYTEZuM1dsRVhwbDNhcGhmR3IwNndRWmsxMEk1U0l3RnE1cUVqanY4WERGcHhsZE1LcWxOb0syaUw0YXJURXhKQkRoYmNWOWEiLCJtYWMiOiIyMzdlMGM0YThhMGRjZmZjYTRiNzliMDBhYmFkMTIwYWNhMDA1MDhkYzAxMTQ1MmY4NmEyNGY5YjI3OGU1MjFkIiwidGFnIjoiIn0%3D; expires=Thu, 20 Nov 2025 21:34:07 GMT; Max-Age=720000; path=/; secure; httponly
strict-transport-security: max-age=63072000; includeSubdomains;
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: br