toom.de

server: openresty
date: Thu, 04 Jun 2026 16:47:29 GMT
content-type: text/html;charset=utf-8
set-cookie: market_id=3248; Expires=Thu, 25-Jun-26 16:47:29 GMT; Path=/; Secure, market_name=Troisdorf; Expires=Thu, 25-Jun-26 16:47:29 GMT; Path=/; Secure, show_localization_bar=Troisdorf; Expires=Thu, 25-Jun-26 16:47:29 GMT; Path=/; Secure
vary: Accept-Encoding
x-toom-market-id: 3248
content-language: de-DE
etag: W/"515930332a2c184e8eaaede20c23e85e"
content-security-policy: child-src 'self' *.adform.net *.cloudfront.net *.criteo.com *.criteo.net ivario.eu *.optimizely.com *.selbstbauprofi.de *.sindholm.com *.sociomantic.com *.toom.de *.tp-de.net  *.trbo.com *.usercentrics.eu *.webmasterplan.com *.youtube-nocookie.com app.parasol-island.com chat.guuru.com form.guuru.com configurator.3yourmind.com deutschland-rundet-auf.de efs-survey.com facebook.com maps.googleapis.com toom-baumarkt.de toom-de.boels.com toom-frame.3yourmind.com toom-rubbeln.safe-promotions.de toom.3yourmind.com toom.preferencecenter.eu toom-epm.test.publicare-service.de www.efs-survey.com www.facebook.com www.google.com/maps/ www.google.com/recaptcha/ challenges.cloudflare.com www.toom-baumarkt.de www.youtube.com www.youtube.de wkdpw.boels.com; frame-src 'self' *.adform.net *.curanto.de *.cloudfront.net *.criteo.com *.criteo.net ivario.eu *.optimizely.com toom-gewinnspiel.de *.toom-gewinnspiel.de *.selbstbauprofi.de *.sindholm.com *.sociomantic.com *.toom.de *.tp-de.net *.trbo.com *.usercentrics.eu *.webmasterplan.com *.youtube-nocookie.com app.parasol-island.com form.guuru.com chat.guuru.com configurator.3yourmind.com deutschland-rundet-auf.de efs-survey.com facebook.com maps.googleapis.com toom-baumarkt.de toom-de.boels.com toom-frame.3yourmind.com toom-rubbeln.safe-promotions.de toom.3yourmind.com toom.preferencecenter.eu toom-epm.test.publicare-service.de www.efs-survey.com www.facebook.com www.google.com/maps/ www.google.com/recaptcha/ challenges.cloudflare.com www.toom-baumarkt.de www.toom.de toom.de www.youtube.com www.youtube.de wkdpw.boels.com *.appointedd.com; object-src 'self'; upgrade-insecure-requests;
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
access-control-allow-origin: https://stg.vtk.tp-de.net https://vtk.tp-de.net
content-encoding: gzip
age: 2511
accept-ranges: bytes
x-backend: UPSTREAM
Via: 1.1 google
Transfer-Encoding: chunked
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000