Nomos-shop.de

content-security-policy: font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.brevo.com data: 'self' 'unsafe-inline'; form-action *.paypal.com *.facebook.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.braintreegateway.com *.paypal.com google.com *.google.com *.cookiebot.com *.nomos-shop.de *.sibforms.com test.saferpay.com www.saferpay.com saferpay.com www.xtento.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.ftcdn.net *.behance.net *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com *.bing.com *.cookiebot.com *.facebook.com *.facebook.net *.linkedin.com *.google.com *.google.de *.paypalobjects.com *.nomos-shop.de https://maps.gstatic.com/ test.saferpay.com www.saferpay.com saferpay.com www.xtento.com cdn.xtento.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com *.bing.com *.brevo.com *.clarity.ms *.cloudflare.com *.cookiebot.com *.facebook.net *.hotjar.com *.licdn.com *.matomo.cloud *.popt.in sibautomation.com sibforms.com *.wonderpush.com *.nomos-shop.de *.google.de test.saferpay.com www.saferpay.com saferpay.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com sibforms.com www.googletagmanager.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com api.friendlycaptcha.com eu-api.friendlycaptcha.eu *.bing.com *.brevo.com *.clarity.ms *.contentsquare.net *.cookiebot.com *.facebook.com *.hotjar.com *.hotjar.io wss://ws.hotjar.com *.linkedin.com *.popt.in *.sibforms.com *.wonderpush.com *.nomos-shop.de *.google.de test.saferpay.com www.saferpay.com saferpay.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
content-type: text/html; charset=UTF-8
pragma: no-cache
set-cookie: PHPSESSID=94bd99f51cca4be2218945939d78aa1a; expires=Tue, 20 Jan 2026 16:48:59 GMT; Max-Age=3600; path=/; domain=nomos-shop.de; secure; HttpOnly; SameSite=Lax
x-platform-server: i-83dcffefa3be373e
x-platform-server: i-83dcffefa3be373e
traceresponse: 00-188c7b21f8888ba1964f49ba991e572a-4d307a8ac7846f0a-01
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
location: https://www.nomos-shop.de/de/
x-debug-info: eyJyZXRyaWVzIjowfQ==
expires: Mon, 20 Jan 2025 15:48:59 GMT
x-content-type-options: nosniff
x-timer: S1768924139.482379,VS0,VE60
cache-control: max-age=0, must-revalidate, no-cache, no-store
accept-ranges: bytes
date: Tue, 20 Jan 2026 15:48:59 GMT
x-served-by: cache-fra-eddf8230091-FRA, cache-fra-etou8220083-FRA
x-cache: MISS, MISS
x-cache-hits: 0, 0
vary: Accept-Encoding,Cookie
strict-transport-security: max-age=31557600
content-length: 0

HTTP/2 200 
x-esi: 1
x-platform-server: i-83dcffefa3be373e
x-platform-server: i-83dcffefa3be373e
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-timer: S1768924018.408162,VS0,VE502
x-built-with: Hyva Themes
content-security-policy: font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.brevo.com data: 'self' 'unsafe-inline'; form-action *.paypal.com *.facebook.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.braintreegateway.com *.paypal.com google.com *.google.com *.cookiebot.com *.nomos-shop.de *.sibforms.com test.saferpay.com www.saferpay.com saferpay.com www.xtento.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.ftcdn.net *.behance.net *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com *.bing.com *.cookiebot.com *.facebook.com *.facebook.net *.linkedin.com *.google.com *.google.de *.paypalobjects.com *.nomos-shop.de https://maps.gstatic.com/ test.saferpay.com www.saferpay.com saferpay.com www.xtento.com cdn.xtento.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com *.bing.com *.brevo.com *.clarity.ms *.cloudflare.com *.cookiebot.com *.facebook.net *.hotjar.com *.licdn.com *.matomo.cloud *.popt.in sibautomation.com sibforms.com *.wonderpush.com *.nomos-shop.de *.google.de test.saferpay.com www.saferpay.com saferpay.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com sibforms.com www.googletagmanager.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com api.friendlycaptcha.com eu-api.friendlycaptcha.eu *.bing.com *.brevo.com *.clarity.ms *.contentsquare.net *.cookiebot.com *.facebook.com *.hotjar.com *.hotjar.io wss://ws.hotjar.com *.linkedin.com *.popt.in *.sibforms.com *.wonderpush.com *.nomos-shop.de *.google.de test.saferpay.com www.saferpay.com saferpay.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
expires: Wed, 21 Jan 2026 15:46:58 GMT
pragma: cache
x-xss-protection: 1; mode=block
traceresponse: 00-188c7b05c7e5c42058e5ab333913662b-17501709aa4391e1-01
content-type: text/html; charset=UTF-8
x-debug-info: eyJyZXRyaWVzIjowfQ==
accept-ranges: none
age: 121
date: Tue, 20 Jan 2026 15:48:59 GMT
x-served-by: cache-fra-etou8220043-FRA, cache-fra-etou8220059-FRA
x-cache: MISS, HIT
x-cache-hits: 0, 0
cache-control: no-store, no-cache, must-revalidate, max-age=0
vary: Accept-Encoding,Cookie
strict-transport-security: max-age=31557600
content-encoding: br