nginx

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 16 Mar 2025 00:01:24 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://lowa.com/ch-de/
X-Cached-At: Sat, 15 Mar 2025 21:27:04 GMT
X-Magento-Cache-Debug: HIT
Vary: Accept-Encoding, Origin
Strict-Transport-Security: max-age=63072000
x-content-type-options: nosniff
X-Upstream-Response-Time: 0.000

nginx

LOWA Sportschuhe - Tradition und Innovation

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 22 Mar 2025 15:27:25 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 9331282
Connection: keep-alive
Vary: Accept-Encoding
Pragma: cache
Content-Security-Policy-Report-Only: font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com *.cloudfront.net *.podigee-cdn.net 'self' data: d3c2yqbxx52o4l.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com d3c2yqbxx52o4l.cloudfront.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.googletagmanager.com/ js.mollie.com *.office365.com schoeffel-lowa.de *.podigee-cdn.net komoot.com d3c2yqbxx52o4l.cloudfront.net www.komoot.com d3ms8mre5rhtvu.cloudfront.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.googleapis.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.cdninstagram.com https://www.mollie.com *.usercentrics.eu *.hubspot.com *.podigee-cdn.net *.hsforms.net *.hsforms.com 'self' data: d3c2yqbxx52o4l.cloudfront.net maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com maps.googleapis.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ cdnjs.cloudflare.com js.mollie.com *.googleadservices.com *.usercentrics.eu *.googleapis.com *.hs-scripts.com *.hs-banner.com *.hs-analytics.net *.podigee-cdn.net *.hsforms.net *.hsforms.com *.gstatic.com d3c2yqbxx52o4l.cloudfront.net pagead2.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.podigee-cdn.net *.googleapis.com *.gstatic.com d3c2yqbxx52o4l.cloudfront.net 'self' 'unsafe-inline'; object-src d3c2yqbxx52o4l.cloudfront.net 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.cloudfront.net d3c2yqbxx52o4l.cloudfront.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com maps.googleapis.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.usercentrics.eu *.googleapis.com *.googlesyndication.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com d3c2yqbxx52o4l.cloudfront.net *.cardinalcommerce.com paypal.com *.paypalobjects.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com d3c2yqbxx52o4l.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Cached-At: Fri, 21 Mar 2025 16:13:28 GMT
X-Magento-Cache-Debug: HIT
Cache-Control: public, max-age=60
Expires: Sat, 22 Mar 2025 15:28:25 GMT
Vary: Accept-Encoding, Origin
Accept-Ranges: bytes
Strict-Transport-Security: max-age=63072000
x-content-type-options: nosniff
X-Upstream-Response-Time: 0.001

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9c:db:3d:03:55:76:2a:5a:4b:a4:74:56:8d:42:59:78:b8
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E5
        Validity
            Not Before: Feb  3 18:47:00 2025 GMT
            Not After : May  4 18:46:59 2025 GMT
        Subject: CN=lowa.ch
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:58:42:74:0f:6b:78:7b:ff:01:55:45:f9:a0:8d:
                    60:2b:09:93:e3:84:01:d4:29:77:62:db:a9:ed:b1:
                    dc:1d:43:8e:cb:c4:75:86:fb:b7:60:28:74:f7:8a:
                    4c:a6:30:20:50:2c:f1:d5:3a:12:b2:0e:ca:bf:cc:
                    06:5b:36:b1:cf
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                DA:2E:AE:8E:87:CA:29:6B:F8:DB:F8:4F:1E:EA:65:E8:5A:62:DA:F1
            X509v3 Authority Key Identifier: 
                9F:2B:5F:CF:3C:21:4F:9D:04:B7:ED:2B:2C:C4:C6:70:8B:D2:D7:0D
            Authority Information Access: 
                OCSP - URI:http://e5.o.lencr.org
                CA Issuers - URI:http://e5.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:lowa.ch, DNS:www.lowa.ch
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Feb  3 19:45:31.025 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:3F:2E:FB:29:56:F7:90:A3:47:0D:09:16:
                                BD:E9:56:F8:CE:1C:31:35:F9:58:CF:02:FB:09:1C:71:
                                90:0B:F8:5A:02:21:00:97:C5:F7:3C:58:64:4A:77:E0:
                                F3:20:16:36:ED:FF:07:27:23:4D:B2:A9:2C:F2:63:56:
                                1B:73:F7:9D:9A:91:70
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
                                16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
                    Timestamp : Feb  3 19:45:31.195 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:E1:A1:EA:FA:8F:00:9A:BC:16:F1:AA:
                                35:64:5E:91:0D:F8:D4:6E:FE:41:B9:CB:42:05:8B:5B:
                                BA:B0:BB:C9:4B:02:21:00:E4:2B:C6:78:BC:84:2E:DC:
                                38:A1:35:50:BE:2D:CC:4F:F5:CF:98:F5:36:3B:4A:6A:
                                E9:83:E6:78:01:D4:7F:22
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:66:02:31:00:f8:10:07:60:91:5d:02:48:56:c5:b5:6a:bc:
        f4:9b:fb:0e:4f:fa:07:2e:6a:1e:5a:37:74:58:8c:7f:66:1a:
        91:ae:e9:8e:f1:14:a1:df:49:a6:7c:0b:50:0b:21:a2:5a:02:
        31:00:a3:37:80:ae:d2:ea:d9:88:5d:1b:16:35:25:68:14:0b:
        fe:88:66:fb:86:60:fd:54:e4:8e:d4:db:2f:c0:66:05:a0:70:
        0b:73:1d:c3:3c:53:11:b2:1d:87:ab:ae:88:f6