Metallgarten.de

server: nginx/1.28.0
date: Mon, 27 Oct 2025 01:09:46 GMT
content-type: text/html
content-length: 169
location: https://www.metallgarten.de//

HTTP/2 301 
server: nginx/1.28.0
date: Mon, 27 Oct 2025 01:09:46 GMT
content-length: 0
x-varnish: 117114173
location: https://www.metallgarten.de/

HTTP/2 200 
server: nginx/1.28.0
date: Mon, 27 Oct 2025 01:09:46 GMT
content-type: text/html; charset=UTF-8
x-built-with: Hyva Themes
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https://906d42bb-492d-4824-b48a-f928e7d30432.sansec.watch/"}]}
content-security-policy-report-only: font-src fonts.gstatic.com use.typekit.net *.googleapis.com *.gstatic.com data: script.hotjar.com *.trustedshops.com maxcdn.bootstrapcdn.com 'self' data: https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.googletagmanager.com *.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com kantkonfigurator.feld-eitorf.de *.storyblok.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com www.google.com consentcdn.cookiebot.com consent.cookiefirst.com google.com/recaptcha/api2 www.gstatic.com/recaptcha/ *.doubleclick.net *.clarity.ms *.visualwebsiteoptimizer.com app.vwo.com *.klarna.com *.facebook.com www.googletagmanager.com *.pinterest.com kantkonfigurator.feld-eitorf.de *.weltpixel.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.gstatic.com *.googleapis.com https://images.unsplash.com www.google.de *.g.doubleclick.net *.facebook.net *.facebook.com *.clarity.ms chart.googleapis.com *.visualwebsiteoptimizer.com app.vwo.com *.trustedshops.com bat.bing.com *.bing.net *.cookiefirst.com *.doubleclick.net *.storyblok.com www.google.at www.google.ba www.google.be www.google.bg www.google.ca www.google.ch www.google.co.ao www.google.co.in www.google.co.ke www.google.co.th www.google.co.uk www.google.com.co www.google.com.do www.google.com.eg www.google.com.tr www.google.com.tw www.google.com.ua www.google.cz www.google.dk www.google.ee www.google.es www.google.fr www.google.ge www.google.gr www.google.hr www.google.hu www.google.ie www.google.it www.google.li www.google.lk www.google.lu www.google.mk www.google.nl www.google.no www.google.pl www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk bat.bing.net https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com *.hsforms.net *.hsforms.com 'self' data: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://maps.googleapis.com js-agent.newrelic.com bam.nr-data.net google-analytics.com googletagmanager.com consentcdn.cookiebot.com consent.cookiebot.com h.online-metrix.net gstatic.com www.gstatic.com www.google.com *.bing.com *.hotjar.com *.g.doubleclick.net *.clarity.ms commerce-chat.com *.visualwebsiteoptimizer.com app.vwo.com *.trustedshops.com *.cookiefirst.com 'unsafe-inline' data: 'self' data: connect.facebook.net *.analytics.google.com *.doubleclick.net *.facebook.net *.googletagmanager.com *.pinimg.com *.pinterest.com *.scriptcdn.net *.storyblok.com https://www.googletagmanager.com tagmanager.google.com unpkg.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.hsforms.net *.hsforms.com *.google.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 127.0.0.1:35729 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.visualwebsiteoptimizer.com app.vwo.com *.cookiefirst.com *.trustedshops.com *.storyblok.com tagmanager.google.com maxcdn.bootstrapcdn.com assets.braintreegateway.com d.ratepay.com d.payla.io dr.payla.io *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.googleapis.com https://maps.googleapis.com https://player.vimeo.com bat.bing.com *.hotjar.com *.aiaibot.com *.g.doubleclick.net bam.nr-data.net bam.nr-data.net/events/ consent.cookiebot.com www.facebook.com *.google-analytics.com *.visualwebsiteoptimizer.com app.vwo.com *.klarnaevt.com *.klarnacdn.com *.klarnacdn.net *.klarna.com *.cookiefirst.com *.google.com *.analytics.google.com *.clarity.ms *.hotjar.io wss://ws.hotjar.com api.trustedshops.com shops-si.trustedshops.com api.trustbadge.etrusted.com trustbadge.api.etrusted.com *.google.de *.bing.net *.doubleclick.net *.facebook.com *.pinterest.com *.trustedshops.com www.google.at www.google.be www.google.bg www.google.ca www.google.ch www.google.co.in www.google.co.uk www.google.com.co www.google.com.do www.google.com.tr www.google.com.ua www.google.cz www.google.dk www.google.es www.google.fr www.google.ge www.google.hr www.google.hu www.google.it www.google.lk www.google.lu www.google.nl www.google.no www.google.pl www.google.ro www.google.ru www.google.si bat.bing.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.etrusted.com https://integrations.etrusted.site 127.0.0.1:35729 ws://127.0.0.1:35729 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://906d42bb-492d-4824-b48a-f928e7d30432.sansec.watch/; report-to report-endpoint;
x-xss-protection: 1; mode=block
x-frame-options: ALLOW-FROM app.storyblok.com
content-encoding: gzip
vary: Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes