Thuma.co

date: Sun, 03 Aug 2025 17:10:15 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: https://www.thuma.co/
x-sorting-hat-podid: 104
x-sorting-hat-shopid: 24480687
x-storefront-renderer-rendered: 1
x-redirect-reason: primary_domain_redirection
shopify-complexity-score: 100
set-cookie: _shopify_essential=:AZhw6Z6qAAEAJRrywnefO6CFkYICeBsds01_dts3SsY9cvbtOKdPZefr5m5SeI2eVE2ADluAFRzHsPMMxUHKgFJS7RbXvA:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax
x-frame-options: DENY
content-security-policy: block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;
strict-transport-security: max-age=7889238
x-shopid: 24480687
x-shardid: 104
vary: Accept
alt-svc: h3=":443"; ma=86400
powered-by: Shopify
server-timing: processing;dur=11, db;dur=4, asn;desc="24940", edge;desc="FRA", country;desc="DE", pageType;desc="index", servedBy;desc="m2vr", requestID;desc="04839147-b819-4e39-bf86-5f8dee608fc2-1754241015", _y;desc="9078e1bb-7c43-4765-9e15-e34b0b9268f7", _s;desc="21099a5b-b0f0-498a-841d-3a60f6e12141"
x-dc: gcp-europe-west1,gcp-europe-west1,gcp-europe-west1
x-request-id: 04839147-b819-4e39-bf86-5f8dee608fc2-1754241015
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=6hcxJYmXI26yl8EEicE2YfgmfpVtqApkvh1cnz3WtgYHr6BDxudl2fTtHCgenS91eanSYo6ubtvNafurCRzZ8GTIUQoKwnXIyQIu30vljHbQiXPXzqPPIgGdHDiuC9EzvmuqcbQr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
x-download-options: noopen
shopify-edge-ip: 2620:127:f00f:5::
server-timing: cfRequestDuration;dur=55.000067
server-timing: ipv6
server: cloudflare
cf-ray: 96976d6a6cebd34e-FRA

HTTP/2 200 
date: Sun, 03 Aug 2025 17:10:16 GMT
content-type: text/html
content-encoding: br
set-cookie: session=e30%3D.GW7LMNvWA3OkeWGZJc3aEpdEDgFSdZd17YSJveVCL78; Path=/; HttpOnly; SameSite=Lax
set-cookie: ssPageLoadID=7aec547f-f3fe-45e9-9cef-8cd697fce68a; max-age=86400; path=/; HttpOnly
set-cookie: ssSessionIdNamespace=6b68f389-a67c-4226-b2e3-00c64dc252a6; max-age=86400; path=/; HttpOnly
set-cookie: ssUserId=377df5fd-8241-4ca8-af91-cac21b9a5c1d; max-age=86400; path=/; HttpOnly
set-cookie: ntaid=4b404e87a3fe48c9a72b7fbc265e5d7acc73260bfdd86a12151ecfd2e9fa094b; max-age=604800; path=/; HttpOnly
strict-transport-security: max-age=31536000
content-security-policy: base-uri 'self'; default-src 'self' 'nonce-76ae9d8658ca3bf92a3a453f728873bc' https://cdn.shopify.com https://shopify.com; frame-ancestors 'self' https://app.contentful.com; style-src 'self' 'unsafe-inline' https://tags.srv.stackadapt.com https://*.fliphtml5.com https://fonts.googleapis.com http://assets.bounceexchange.com https://heapanalytics.com https://*.klaviyo.com https://cdn.shopify.com https://*.bounceexchange.com/ 'self' 'unsafe-inline' https://cdn.shopify.com; connect-src 'self' https://*.affirm.com https://api.crossingminds.com https://*.getelevar.com https://*.reddit.com https://*.redditstatic.com https://mgln.ai https://*.podscribe.com https://*.snapchat.com/ https://fast.a.klaviyo.com https://bat.bing.com https://*.klaviyo.com https://tags.srv.stackadapt.com https://t.clarity.ms https://*.spotify.com https://*.fliphtml5.com https://formkeep.com https://www.googleadservices.com https://*.google.com https://*.pinterest.com https://*.telemetry.vaultdcr.com https://ib.adnxs.com https://*.tiktok.com https://*.taboola.com https://*.cdnbasket.net/ https://*.cdnwidget.com https://stats.g.doubleclick.net https://*.gladly.com https://*.google-analytics.com/ https://*.clarity.ms https://rp4.liadm.com https://tsdtocl.com https://heapanalytics.com https://c.us.heap-api.com https://api.marker.io https://s3.eu-west-1.amazonaws.com https://ssr.marker.io https://experience.ninetailed.co https://*.onetrust.com https://*.cookielaw.org https://*.pbbl.co http://*.pbbl.co https://aa.agkn.com https://api.rollbar.com/ https://*.searchspring.io https://*.sentry.io https://*.thuma.co https://*.bounceexchange.com/ https://*.cdnwidget.net/ https://events.bouncex.net/ https://rp.liadm.com/ https://api-cdn.yotpo.com/v1/ 'self' https://monorail-edge.shopifysvc.com https://thuma-bed.myshopify.com https://thuma-bed.myshopify.com; child-src 'self' https://*.bounceexchange.com/; font-src 'self' data: https://*.klaviyo.com https://fonts.gstatic.com https://heapanalytics.com https://cdn.shopify.com https://*.bounceexchange.com/; frame-src 'self' https://www.affirm.com https://tr.snapchat.com/ https://shopify-gtm-suite.getelevar.com https://*.fliphtml5.com https://*.googletagmanager.com https://*.pinterest.com https://*.doubleclick.net/ https://assets.bounceexchange.com https://app.marker.io/ https://*.narvar.com https://preview.widgets.ninetailed.io/ https://*.pbbl.co http://*.pbbl.co https://aa.agkn.com https://*.bounceexchange.com/; img-src 'self' data: https://*.ctfassets.net https://accretivemedia.go2cloud.org https://*.reddit.com https://*.facebook.com https://bat.bing.com https://*.podscribe.com https://mgln.ai https://*.mgln.ai https://pixel.tapad.com http://*.cloudfront.net https://tags.srv.stackadapt.com https://*.fliphtml5.com https://*.googletagmanager.com https://trkn.us https://segment.prod.bidr.io https://ib.adnxs.com https://*.cdnwidget.com https://*.google.com https://*.google.com.ph https://events.bouncex.net http://assets.bounceexchange.com https://googleads.g.doubleclick.net https://rp4.liadm.com https://heapanalytics.com https://*.cookielaw.org https://*.pbbl.co http://*.pbbl.co https://a.audrte.com https://aa.agkn.com https://dpm.demdex.net https://match.adsrvr.org https://ce.lijit.com https://us-u.openx.net https://d.turn.com https://idsync.rlcdn.com https://*.cdnwidget.com/ https://rt8cfew9.thuma.co/ https://c.clarity.ms/ https://www.google.co.uk/ https://c.bing.com/ https://pippio.com/ https://i.liadm.com/ https://cdn.shopify.com https://*.thuma.co https://*.bounceexchange.com/ https://events.bouncex.net/ https://rp.liadm.com/; media-src 'self' https://*.ctfassets.net https://*.fliphtml5.com https://*.thuma.co; script-src 'self' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https://cdn1.affirm.com https://*.fliphtml5.com https://heapanalytics.com https://cdn.us.heap-api.com https://edge.marker.io https://*.pbbl.co http://*.pbbl.co https://aa.agkn.com https://tags.srv.stackadapt.com https://cdn.shopify.com https://*.bounceexchange.com/ https://tag.wknd.ai/ 'nonce-76ae9d8658ca3bf92a3a453f728873bc'
oxygen-full-page-cache: uncacheable
powered-by: Shopify, Oxygen, Hydrogen
x-request-id: 3c2fa95a-b106-4f54-8ea8-9e4ca46e7eaa-1754241015
x-shopid: 24480687
report-to: {"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=kNiFcw6Jc4dPlxyfN%2FwLKba0Y5zswjNMTSe9rIkqMZYWEeTGeO0swIg07rSzq%2FZGWY1x1lOfh4wn3qdIV%2BICPu3iwqcSwQAPccNFdSNhs7zOGVJ5fLihs3QLP43WzNEiuHL0XdPB1xMJFw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server-timing: cfRequestDuration;dur=1325.999975
server-timing: ipv6
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
x-download-options: noopen
shopify-edge-ip: 2620:127:f00f:e::
server: cloudflare
cf-ray: 96976d6aeba39295-FRA
alt-svc: h3=":443"; ma=86400