34 technologies4 categories
pandora.net is built on Chakra UI with Cloudflare and Google Tag Manager. It ranks #13,452 globally.
Analytics are handled by Google Tag Manager and Google Analytics. Infrastructure includes Cloudflare and Amazon CloudFront.
Tech Stack Highlights
Frameworks & Languages2
Chakra UI
UI frameworks
100%
3 evidence signals
HTML
chakra-css
--chakra-DOM
chakra-classReact
JavaScript frameworks
75%
1 evidence signal
HTML
data-reactAnalytics & Marketing21
Google Tag Manager
Tag managers
100%
3 evidence signals
HTML
googletagmanager.com/gtm.jsJS Global
google_tag_manager → objectJS Global
dataLayer → objectGoogle Analytics
Analytics
100%
3 evidence signals
Script
https://www.googletagmanager.com/gtag/js?id=DC-5736037&cx=c>m=4e6241Script
https://www.googletagmanager.com/gtag/js?id=AW-953664325JS Global
gtag → functionFacebook Pixelv2.9.261
Analytics
100%
3 evidence signals
Script
https://connect.facebook.net/signals/config/358947487606651?v=2.9.261&r=stable&domain=us.pandora.net&hme=20296eac3bb30511174edf43e83f1c9e303df926d3c833283a366d6f5480f82a&ex_m=95%2C158%2C135%2C20%2C67%2C68%2C128%2C63%2C42%2C129%2C72%2C62%2C10%2C142%2C81%2C15%2C94%2C123%2C116%2C70%2C73%2C122%2C139%2C103%2C144%2C7%2C3%2C4%2C6%2C5%2C2%2C82%2C92%2C145%2C226%2C170%2C56%2C228%2C229%2C49%2C185%2C27%2C69%2C234%2C233%2C173%2C29%2C55%2C9%2C58%2C88%2C89%2C90%2C96%2C119%2C28%2C26%2C121%2C118%2C117%2C136%2C71%2C138%2C137%2C44%2C54%2C112%2C14%2C141%2C39%2C215%2C217%2C180%2C23%2C24%2C25%2C17%2C18%2C38%2C34%2C36%2C35%2C77%2C83%2C87%2C101%2C127%2C130%2C40%2C102%2C21%2C19%2C108%2C64%2C32%2C132%2C131%2C133%2C124%2C22%2C31%2C53%2C100%2C140%2C65%2C16%2C134%2C105%2C76%2C61%2C30%2C195%2C165%2C287%2C213%2C156%2C198%2C191%2C166%2C98%2C120%2C75%2C110%2C48%2C41%2C43%2C104%2C109%2C115%2C52%2C59%2C114%2C47%2C50%2C46%2C91%2C143%2C0%2C113%2C13%2C111%2C11%2C1%2C51%2C84%2C57%2C60%2C107%2C80%2C79%2C146%2C147%2C85%2C86%2C8%2C93%2C45%2C125%2C78%2C74%2C66%2C106%2C97%2C37%2C126%2C33%2C99%2C12%2C148Script
https://connect.facebook.net/en_US/fbevents.jsJS Global
_fbq → function(v2.9.261)Microsoft Advertising
Advertising
100%
5 evidence signals
Cookie
_uetsidCookie
_uetvidScript
https://bat.bing.com/bat.jsJS Global
UET → functionJS Global
uetq → objectImpact
Affiliate programs
100%
2 evidence signals
Script
https://d.impactradius-event.com/A177878-117e-4186-a289-50c6ec59a1f51.jsJS Global
irEvent → objectAttentive
Personalisation
100%
5 evidence signals
Script
https://cdn.attn.tv/pandora/dtag.jsScript
https://cdn.attn.tv/tag/4-latest/unified-tag.js?v=4-latest_b83e984111Script
https://cdn.attn.tv/growth-tag-assets/client-configs/cXM.jsJS Global
__attentive → objectJS Global
__attentive_domain → stringMonetate
A/B Testing
100%
9 evidence signals
Script
https://se.monetate.net/js/3/a-37eeeff6/p/us.pandora.net/t1768841344/7d41224f2776e3b8/custom.jsScript
https://se.monetate.net/js/2/a-37eeeff6/p/us.pandora.net/entry.jsScript
https://se.monetate.net/js/3/a-37eeeff6/p/us.pandora.net/t1768841344/7d41224f2776e3b8/custom.jsScript
https://se.monetate.net/js/2/a-37eeeff6/p/us.pandora.net/entry.jsScript
https://f.monetate.net/trk/4/s/a-37eeeff6/p/us.pandora.net/682960408-0?mr=t1768841344&mi=%272.1437839302.1770552488615%27&cs=!t&e=!(viewPage,gt)&pt=home&r=%27%27&sw=800&sh=600&sc=24&j=!f&u=%27https://us.pandora.net/en%27&fl=!f&hvc=!t&eoq=!tScript
https://sb.monetate.net/img/1/p/1047/5890281.js/monetate.c.cr.jsJS Global
monetate → objectJS Global
monetateQ → objectJS Global
monetateT → numberM
Microsoft 365
Email
100%
1 evidence signal
dns
MX: pandora-net.mail.protection.outlook.comS
Salesforce
CRM
95%
1 evidence signal
dns
SPF includes salesforce.comS
SendGrid
Email
95%
1 evidence signal
dns
SPF includes sendgrid.netAppNexus
Advertising
75%
1 evidence signal
Script
https://acdn.adnxs.com/dmp/up/pixie.jsMicrosoft Clarity
Analytics
75%
1 evidence signal
JS Global
clarity → functionContentsquare
Analytics
75%
1 evidence signal
Script
https://t.contentsquare.net/uxa/cab6ca003be33.jsNew Relic
RUM
75%
2 evidence signals
JS Global
NREUM → objectJS Global
newrelic → objectPinterest Conversion Tagv3.0
Analytics
75%
1 evidence signal
JS Global
pintrk → function(v3.0)Tealium
Tag managers
75%
30 evidence signals
Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.jsScript
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.sync.jsScript
https://tags.tiqcdn.com/utag/tiqapp/utag.currency.js?utv=ut4.51.202602060941Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.362.js?utv=ut4.51.202601120856Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.92.js?utv=ut4.51.202601120856Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.622.js?utv=ut4.51.202602060941Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.407.js?utv=ut4.51.202509151242Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.96.js?utv=ut4.51.202601120856Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.97.js?utv=ut4.51.202511171441Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.595.js?utv=ut4.51.202510091214Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.98.js?utv=ut4.51.202601120856Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.100.js?utv=ut4.51.202602031127Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.117.js?utv=ut4.51.202509151242Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.249.js?utv=ut4.51.202509151242Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.416.js?utv=ut4.51.202510011024Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.363.js?utv=ut4.51.202510011024Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.367.js?utv=ut4.51.202510091214Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.375.js?utv=ut4.51.202509250736Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.383.js?utv=ut4.51.202510091214Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.409.js?utv=ut4.51.202510091214Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.564.js?utv=ut4.51.202510011024Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.587.js?utv=ut4.51.202510091214Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.592.js?utv=ut4.51.202510091214Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.602.js?utv=ut4.51.202509151242Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.625.js?utv=ut4.51.202509151242Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.671.js?utv=ut4.51.202509151242Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.748.js?utv=ut4.51.202508120947Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.599.js?utv=ut4.51.202602060941Script
https://tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=pandora/main-spa/202602060941&cb=1770552490269Script
https://tags.tiqcdn.com/utag/pandora/main-spa/prod/utag.724.js?utv=ut4.51.202602060941TikTok Pixel
Analytics
75%
1 evidence signal
JS Global
TiktokAnalyticsObject → stringTeads
Advertising
75%
1 evidence signal
Script
https://p.teads.tv/teads-fellow.jsRakuten
Affiliate programs
75%
1 evidence signal
Script
https://tag.rmp.rakuten.com/125918.ct.jsRakuten Advertising
Advertising
75%
1 evidence signal
Script
https://tag.rmp.rakuten.com/125918.ct.jsExponea
Customer data platform
75%
1 evidence signal
Script
https://api.exp.pandora.net/js/exponea.min.jsInfrastructure & Security6
Cloudflare
CDN
100%
3 evidence signals
Header
9cab02b9fea615d4-SJCHeader
cloudflare: cloudflareCookie
__cf_bmOneTrust
Cookie compliance
75%
3 evidence signals
Script
https://cdn.cookielaw.org/scripttemplates/otSDKStub.jsScript
https://cdn.cookielaw.org/scripttemplates/otSDKStub.jsScript
https://cdn.cookielaw.org/scripttemplates/otSDKStub.jsHSTS
Security
75%
1 evidence signal
Header
max-age=15552000; includeSubDomainsAmazon CloudFront
CDN
75%
2 evidence signals
Header
\(CloudFront\)$: 1.1 b0fe3eefa4f21a3a8e8b7f811d05f7b8.cloudfront.net (CloudFront)Header
OfCpz60dZOfgfAXh3_YKcBUfxFeFdJ6XsxszlsuqEso-QdJhsiu1iA==Cloudflare Bot Management
Security
75%
1 evidence signal
Cookie
__cf_bmAmazon Web Services
PaaS
50%
1 evidence signal
HTML
implied by Amazon CloudFrontLibraries & Utilities5
HTTP/3
Miscellaneous
75%
1 evidence signal
Header
h3: h3=":443"; ma=86400Loadable-Components
JavaScript libraries
75%
1 evidence signal
JS Global
__LOADABLE_LOADED_CHUNKS__ → objectPayPal
Payment processors
75%
1 evidence signal
Header
\.paypal\.com: img-src 'self' *.commercecloud.salesforce.com *.dol.api.pandoradigital.io pandora.a.bigcontent.io data: gstatic:* localhost:* *.pt-engravingui.spark.ui.pandoradigital.io *.spark.ui.pandoradigital.io *.pandora.net *.launchdarkly.com cdn.cookielaw.org *.doubleclick.net bat.bing.com *.facebook.com *.api.cquotient.com consent.linksynergy.com *.kampyle.com sc-static.net *.teads.tv d.impactradius-event.com cdn.tkrconnector.com *.adnxs.com s.yimg.com s.yimg.jp *.yimg.jp s.yjtag.jp *.yjtag.jp *.attn.tv *.cloudfront.net *.demdex.net google.com *.google.com *.google.dk *.google.co.uk *.google.de *.google.fr *.google.it *.google.ca *.google.com.au *.google.pl *.google.es *.google.com.mx *.google.co.za *.google.com.hk *.google.co.jp *.google.co.nz *.google.com.sg *.google.at *.google.be *.google.cz *.google.gr *.google.hu *.google.ie *.google.nl *.google.no *.google.pt *.google.ro *.google.sk *.google.se *.google.ch *.google.com.tr *.google.ae *.newrelic.com *.pangle-ads.com *.everesttech.net *.yahoo.com *.yahoo.co.jp *.amazon-adsystem.com *.snapchat.com *.salecycle.com wss://ws.salecycle.com *.attentivemobile.com *.sc-trc.com *.tealiumiq.com *.googleadservices.com *.brcdn.com *.nr-data.net *.brsrvr.com *.demandware.net *.contentsquare.net *.pinimg.com *.pinterest.com ct.pinterest.com *.monetate.net *.dwin1.com *.akstat.io *.go-mpulse.net *.analytics.tiktok.com heapanalytics.com *.googletagmanager.com analytics.tiktok.com api.cquotient.com *.media.qmutator.com cdn.livechatinc.com api.livechatinc.com pixel.mediaiqdigital.com secure.adnxs.com app.amplience.net smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.sandbox.my.salesforce.com *.sandbox.my.site.com *.sandbox.my.salesforce-setup.com *.sandbox.my.salesforce-scrt.com *.my.salesforce-scrt.com *.my.salesforce-setup.com *.my.site.com *.my.salesforce.com *.criteo.com d.line-scdn.net track.effiliation.com *.creativecdn.com *.nunami.ai pandora.evyy.net *.impct.site *.smaato.net *.rakuten.com *.line.me *.mathtag.com pixel.mathtag.com *.klarna.com *.klarnaservices.com *.paypal.com *.paypalobjects.com *.afterpay.com *.yotpo.com *.adgile.media cdn.shopify.com *.sjv.io perfmaker.net *.perfmaker.net ban.2trk.info *.ban.2trk.info *.cdn.content.amplience.net cdn.media.amplience.net *.staging.bigcontent.io i8.amplience.net cdn.static.amplience.net api.amplience.net auth.amplience.net pandora.a.bigcontent.io *.googlesyndication.com *.roeye.com *.loggly.com localhost:* blob: pandora.a.bigcontent.io *.line.me;script-src 'self' *.commercecloud.salesforce.com *.dol.api.pandoradigital.io pandora.a.bigcontent.io data: gstatic:* localhost:* *.pt-engravingui.spark.ui.pandoradigital.io *.spark.ui.pandoradigital.io *.pandora.net *.launchdarkly.com cdn.cookielaw.org *.doubleclick.net bat.bing.com *.facebook.com *.api.cquotient.com consent.linksynergy.com *.kampyle.com sc-static.net *.teads.tv d.impactradius-event.com cdn.tkrconnector.com *.adnxs.com s.yimg.com s.yimg.jp *.yimg.jp s.yjtag.jp *.yjtag.jp *.attn.tv *.cloudfront.net *.demdex.net google.com *.google.com *.google.dk *.google.co.uk *.google.de *.google.fr *.google.it *.google.ca *.google.com.au *.google.pl *.google.es *.google.com.mx *.google.co.za *.google.com.hk *.google.co.jp *.google.co.nz *.google.com.sg *.google.at *.google.be *.google.cz *.google.gr *.google.hu *.google.ie *.google.nl *.google.no *.google.pt *.google.ro *.google.sk *.google.se *.google.ch *.google.com.tr *.google.ae *.newrelic.com *.pangle-ads.com *.everesttech.net *.yahoo.com *.yahoo.co.jp *.amazon-adsystem.com *.snapchat.com *.salecycle.com wss://ws.salecycle.com *.attentivemobile.com *.sc-trc.com *.tealiumiq.com *.googleadservices.com *.brcdn.com *.nr-data.net *.brsrvr.com *.demandware.net *.contentsquare.net *.pinimg.com *.pinterest.com ct.pinterest.com *.monetate.net *.dwin1.com *.akstat.io *.go-mpulse.net *.analytics.tiktok.com heapanalytics.com *.googletagmanager.com analytics.tiktok.com api.cquotient.com *.media.qmutator.com cdn.livechatinc.com api.livechatinc.com pixel.mediaiqdigital.com secure.adnxs.com app.amplience.net smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.sandbox.my.salesforce.com *.sandbox.my.site.com *.sandbox.my.salesforce-setup.com *.sandbox.my.salesforce-scrt.com *.my.salesforce-scrt.com *.my.salesforce-setup.com *.my.site.com *.my.salesforce.com *.criteo.com d.line-scdn.net track.effiliation.com *.creativecdn.com *.nunami.ai pandora.evyy.net *.impct.site *.smaato.net *.rakuten.com *.line.me *.mathtag.com pixel.mathtag.com *.klarna.com *.klarnaservices.com *.paypal.com *.paypalobjects.com *.afterpay.com *.yotpo.com *.adgile.media cdn.shopify.com *.sjv.io perfmaker.net *.perfmaker.net ban.2trk.info *.ban.2trk.info tags.tiqcdn.com tags.tiqcdn.cn tags-eu.tiqcdn.com connect.facebook.net tag.rmp.rakuten.com pandora-pixel.netlify.app *.googlesyndication.com *.onetrust.com *.roeyecdn.com *.akamaihd.net *.mobify-storefront.com https://runtime.commercecloud.com *.flickity.pkgd.min.js *.heap-api.com *.medallia.com *.videobeat.net *.bloomreach.com *.exponea.com *.pandora.net *.exp.pandora.net *.cdn.content.amplience.net cdn.media.amplience.net *.staging.bigcontent.io i8.amplience.net cdn.static.amplience.net api.amplience.net auth.amplience.net pandora.a.bigcontent.io 'nonce-ApxslkMlGuB34TBjkiIdiA==' 'strict-dynamic' 'unsafe-inline' storage.googleapis.com static.cloudflareinsights.com app.contentsquare.com www.clarity.ms *.clarity.ms cdn.jsdelivr.net *.klarna.com *.getblue.io 'unsafe-eval';connect-src 'self' *.commercecloud.salesforce.com *.dol.api.pandoradigital.io pandora.a.bigcontent.io data: gstatic:* localhost:* *.pt-engravingui.spark.ui.pandoradigital.io *.spark.ui.pandoradigital.io *.pandora.net *.launchdarkly.com cdn.cookielaw.org *.doubleclick.net bat.bing.com *.facebook.com *.api.cquotient.com consent.linksynergy.com *.kampyle.com sc-static.net *.teads.tv d.impactradius-event.com cdn.tkrconnector.com *.adnxs.com s.yimg.com s.yimg.jp *.yimg.jp s.yjtag.jp *.yjtag.jp *.attn.tv *.cloudfront.net *.demdex.net google.com *.google.com *.google.dk *.google.co.uk *.google.de *.google.fr *.google.it *.google.ca *.google.com.au *.google.pl *.google.es *.google.com.mx *.google.co.za *.google.com.hk *.google.co.jp *.google.co.nz *.google.com.sg *.google.at *.google.be *.google.cz *.google.gr *.google.hu *.google.ie *.google.nl *.google.no *.google.pt *.google.ro *.google.sk *.google.se *.google.ch *.google.com.tr *.google.ae *.newrelic.com *.pangle-ads.com *.everesttech.net *.yahoo.com *.yahoo.co.jp *.amazon-adsystem.com *.snapchat.com *.salecycle.com wss://ws.salecycle.com *.attentivemobile.com *.sc-trc.com *.tealiumiq.com *.googleadservices.com *.brcdn.com *.nr-data.net *.brsrvr.com *.demandware.net *.contentsquare.net *.pinimg.com *.pinterest.com ct.pinterest.com *.monetate.net *.dwin1.com *.akstat.io *.go-mpulse.net *.analytics.tiktok.com heapanalytics.com *.googletagmanager.com analytics.tiktok.com api.cquotient.com *.media.qmutator.com cdn.livechatinc.com api.livechatinc.com pixel.mediaiqdigital.com secure.adnxs.com app.amplience.net smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.sandbox.my.salesforce.com *.sandbox.my.site.com *.sandbox.my.salesforce-setup.com *.sandbox.my.salesforce-scrt.com *.my.salesforce-scrt.com *.my.salesforce-setup.com *.my.site.com *.my.salesforce.com *.criteo.com d.line-scdn.net track.effiliation.com *.creativecdn.com *.nunami.ai pandora.evyy.net *.impct.site *.smaato.net *.rakuten.com *.line.me *.mathtag.com pixel.mathtag.com *.klarna.com *.klarnaservices.com *.paypal.com *.paypalobjects.com *.afterpay.com *.yotpo.com *.adgile.media cdn.shopify.com *.sjv.io perfmaker.net *.perfmaker.net ban.2trk.info *.ban.2trk.info tags.tiqcdn.com tags.tiqcdn.cn tags-eu.tiqcdn.com connect.facebook.net tag.rmp.rakuten.com pandora-pixel.netlify.app *.googlesyndication.com *.onetrust.com *.roeyecdn.com *.akamaihd.net *.mobify-storefront.com https://runtime.commercecloud.com *.flickity.pkgd.min.js *.heap-api.com *.medallia.com *.videobeat.net *.bloomreach.com *.exponea.com *.pandora.net *.exp.pandora.net *.cdn.content.amplience.net cdn.media.amplience.net *.staging.bigcontent.io i8.amplience.net cdn.static.amplience.net api.amplience.net auth.amplience.net pandora.a.bigcontent.io ws://localhost:* wss://localhost:* ws://127.0.0.1:* wss://127.0.0.1:* ws://0.0.0.0:* wss://0.0.0.0:* privacyportal-eu.onetrust.com *.vwli.net *.clarity.ms blob: *.gstatic.com *.login.microsoftonline.com;frame-src 'self' *.commercecloud.salesforce.com *.dol.api.pandoradigital.io pandora.a.bigcontent.io data: gstatic:* localhost:* *.pt-engravingui.spark.ui.pandoradigital.io *.spark.ui.pandoradigital.io *.pandora.net *.launchdarkly.com cdn.cookielaw.org *.doubleclick.net bat.bing.com *.facebook.com *.api.cquotient.com consent.linksynergy.com *.kampyle.com sc-static.net *.teads.tv d.impactradius-event.com cdn.tkrconnector.com *.adnxs.com s.yimg.com s.yimg.jp *.yimg.jp s.yjtag.jp *.yjtag.jp *.attn.tv *.cloudfront.net *.demdex.net google.com *.google.com *.google.dk *.google.co.uk *.google.de *.google.fr *.google.it *.google.ca *.google.com.au *.google.pl *.google.es *.google.com.mx *.google.co.za *.google.com.hk *.google.co.jp *.google.co.nz *.google.com.sg *.google.at *.google.be *.google.cz *.google.gr *.google.hu *.google.ie *.google.nl *.google.no *.google.pt *.google.ro *.google.sk *.google.se *.google.ch *.google.com.tr *.google.ae *.newrelic.com *.pangle-ads.com *.everesttech.net *.yahoo.com *.yahoo.co.jp *.amazon-adsystem.com *.snapchat.com *.salecycle.com wss://ws.salecycle.com *.attentivemobile.com *.sc-trc.com *.tealiumiq.com *.googleadservices.com *.brcdn.com *.nr-data.net *.brsrvr.com *.demandware.net *.contentsquare.net *.pinimg.com *.pinterest.com ct.pinterest.com *.monetate.net *.dwin1.com *.akstat.io *.go-mpulse.net *.analytics.tiktok.com heapanalytics.com *.googletagmanager.com analytics.tiktok.com api.cquotient.com *.media.qmutator.com cdn.livechatinc.com api.livechatinc.com pixel.mediaiqdigital.com secure.adnxs.com app.amplience.net smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.sandbox.my.salesforce.com *.sandbox.my.site.com *.sandbox.my.salesforce-setup.com *.sandbox.my.salesforce-scrt.com *.my.salesforce-scrt.com *.my.salesforce-setup.com *.my.site.com *.my.salesforce.com *.criteo.com d.line-scdn.net track.effiliation.com *.creativecdn.com *.nunami.ai pandora.evyy.net *.impct.site *.smaato.net *.rakuten.com *.line.me *.mathtag.com pixel.mathtag.com *.klarna.com *.klarnaservices.com *.paypal.com *.paypalobjects.com *.afterpay.com *.yotpo.com *.adgile.media cdn.shopify.com *.sjv.io perfmaker.net *.perfmaker.net ban.2trk.info *.ban.2trk.info *.cdn.content.amplience.net cdn.media.amplience.net *.staging.bigcontent.io i8.amplience.net cdn.static.amplience.net api.amplience.net auth.amplience.net pandora.a.bigcontent.io *.googlesyndication.com *.campaign.playable.com *.getblue.io;child-src blob: localhost:* *.pandora.net;media-src 'self' *.cdn.content.amplience.net cdn.media.amplience.net *.staging.bigcontent.io i8.amplience.net cdn.static.amplience.net api.amplience.net auth.amplience.net pandora.a.bigcontent.io smct.co *.smct.co smct.io *.smct.io *.amazonaws.com;frame-ancestors 'self' *.amplience.net https://runtime.commercecloud.com https://*.commercecloud.com;style-src 'unsafe-inline' heapanalytics.com https://cdn.fonts.net *.monetate.net pvapandora.blob.core.windows.net fonts.googleapis.com smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.sandbox.my.salesforce.com *.sandbox.my.site.com *.sandbox.my.salesforce-setup.com *.sandbox.my.salesforce-scrt.com *.my.salesforce-scrt.com *.my.salesforce-setup.com *.my.site.com *.my.salesforce.com localhost:* *.spark.ui.pandoradigital.io *.gstatic.com *.klarnacdn.net *.paypalobjects.com *.yotpo.com perfmaker.net *.perfmaker.net;font-src 'self' heapanalytics.com data: https://cdn.fonts.net *.monetate.net smct.co *.smct.co smct.io *.smct.io *.amazonaws.com localhost:* *.spark.ui.pandoradigital.io *.klarnacdn.net *.paypalobjects.com *.yotpo.com cdn.shopify.com;upgrade-insecure-requests;default-src 'self';base-uri 'self';block-all-mixed-content;object-src 'none';script-src-attr 'none'Boomerangv1.815.0
JavaScript libraries
75%
2 evidence signals
JS Global
BOOMR → object(v1.815.0)JS Global
BOOMR_mq → objectKlarna Checkout
Payment processors
75%
1 evidence signal
Header
\.klarna(?:cdn|services)\.(?:net|com): img-src 'self' *.commercecloud.salesforce.com *.dol.api.pandoradigital.io pandora.a.bigcontent.io data: gstatic:* localhost:* *.pt-engravingui.spark.ui.pandoradigital.io *.spark.ui.pandoradigital.io *.pandora.net *.launchdarkly.com cdn.cookielaw.org *.doubleclick.net bat.bing.com *.facebook.com *.api.cquotient.com consent.linksynergy.com *.kampyle.com sc-static.net *.teads.tv d.impactradius-event.com cdn.tkrconnector.com *.adnxs.com s.yimg.com s.yimg.jp *.yimg.jp s.yjtag.jp *.yjtag.jp *.attn.tv *.cloudfront.net *.demdex.net google.com *.google.com *.google.dk *.google.co.uk *.google.de *.google.fr *.google.it *.google.ca *.google.com.au *.google.pl *.google.es *.google.com.mx *.google.co.za *.google.com.hk *.google.co.jp *.google.co.nz *.google.com.sg *.google.at *.google.be *.google.cz *.google.gr *.google.hu *.google.ie *.google.nl *.google.no *.google.pt *.google.ro *.google.sk *.google.se *.google.ch *.google.com.tr *.google.ae *.newrelic.com *.pangle-ads.com *.everesttech.net *.yahoo.com *.yahoo.co.jp *.amazon-adsystem.com *.snapchat.com *.salecycle.com wss://ws.salecycle.com *.attentivemobile.com *.sc-trc.com *.tealiumiq.com *.googleadservices.com *.brcdn.com *.nr-data.net *.brsrvr.com *.demandware.net *.contentsquare.net *.pinimg.com *.pinterest.com ct.pinterest.com *.monetate.net *.dwin1.com *.akstat.io *.go-mpulse.net *.analytics.tiktok.com heapanalytics.com *.googletagmanager.com analytics.tiktok.com api.cquotient.com *.media.qmutator.com cdn.livechatinc.com api.livechatinc.com pixel.mediaiqdigital.com secure.adnxs.com app.amplience.net smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.sandbox.my.salesforce.com *.sandbox.my.site.com *.sandbox.my.salesforce-setup.com *.sandbox.my.salesforce-scrt.com *.my.salesforce-scrt.com *.my.salesforce-setup.com *.my.site.com *.my.salesforce.com *.criteo.com d.line-scdn.net track.effiliation.com *.creativecdn.com *.nunami.ai pandora.evyy.net *.impct.site *.smaato.net *.rakuten.com *.line.me *.mathtag.com pixel.mathtag.com *.klarna.com *.klarnaservices.com *.paypal.com *.paypalobjects.com *.afterpay.com *.yotpo.com *.adgile.media cdn.shopify.com *.sjv.io perfmaker.net *.perfmaker.net ban.2trk.info *.ban.2trk.info *.cdn.content.amplience.net cdn.media.amplience.net *.staging.bigcontent.io i8.amplience.net cdn.static.amplience.net api.amplience.net auth.amplience.net pandora.a.bigcontent.io *.googlesyndication.com *.roeye.com *.loggly.com localhost:* blob: pandora.a.bigcontent.io *.line.me;script-src 'self' *.commercecloud.salesforce.com *.dol.api.pandoradigital.io pandora.a.bigcontent.io data: gstatic:* localhost:* *.pt-engravingui.spark.ui.pandoradigital.io *.spark.ui.pandoradigital.io *.pandora.net *.launchdarkly.com cdn.cookielaw.org *.doubleclick.net bat.bing.com *.facebook.com *.api.cquotient.com consent.linksynergy.com *.kampyle.com sc-static.net *.teads.tv d.impactradius-event.com cdn.tkrconnector.com *.adnxs.com s.yimg.com s.yimg.jp *.yimg.jp s.yjtag.jp *.yjtag.jp *.attn.tv *.cloudfront.net *.demdex.net google.com *.google.com *.google.dk *.google.co.uk *.google.de *.google.fr *.google.it *.google.ca *.google.com.au *.google.pl *.google.es *.google.com.mx *.google.co.za *.google.com.hk *.google.co.jp *.google.co.nz *.google.com.sg *.google.at *.google.be *.google.cz *.google.gr *.google.hu *.google.ie *.google.nl *.google.no *.google.pt *.google.ro *.google.sk *.google.se *.google.ch *.google.com.tr *.google.ae *.newrelic.com *.pangle-ads.com *.everesttech.net *.yahoo.com *.yahoo.co.jp *.amazon-adsystem.com *.snapchat.com *.salecycle.com wss://ws.salecycle.com *.attentivemobile.com *.sc-trc.com *.tealiumiq.com *.googleadservices.com *.brcdn.com *.nr-data.net *.brsrvr.com *.demandware.net *.contentsquare.net *.pinimg.com *.pinterest.com ct.pinterest.com *.monetate.net *.dwin1.com *.akstat.io *.go-mpulse.net *.analytics.tiktok.com heapanalytics.com *.googletagmanager.com analytics.tiktok.com api.cquotient.com *.media.qmutator.com cdn.livechatinc.com api.livechatinc.com pixel.mediaiqdigital.com secure.adnxs.com app.amplience.net smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.sandbox.my.salesforce.com *.sandbox.my.site.com *.sandbox.my.salesforce-setup.com *.sandbox.my.salesforce-scrt.com *.my.salesforce-scrt.com *.my.salesforce-setup.com *.my.site.com *.my.salesforce.com *.criteo.com d.line-scdn.net track.effiliation.com *.creativecdn.com *.nunami.ai pandora.evyy.net *.impct.site *.smaato.net *.rakuten.com *.line.me *.mathtag.com pixel.mathtag.com *.klarna.com *.klarnaservices.com *.paypal.com *.paypalobjects.com *.afterpay.com *.yotpo.com *.adgile.media cdn.shopify.com *.sjv.io perfmaker.net *.perfmaker.net ban.2trk.info *.ban.2trk.info tags.tiqcdn.com tags.tiqcdn.cn tags-eu.tiqcdn.com connect.facebook.net tag.rmp.rakuten.com pandora-pixel.netlify.app *.googlesyndication.com *.onetrust.com *.roeyecdn.com *.akamaihd.net *.mobify-storefront.com https://runtime.commercecloud.com *.flickity.pkgd.min.js *.heap-api.com *.medallia.com *.videobeat.net *.bloomreach.com *.exponea.com *.pandora.net *.exp.pandora.net *.cdn.content.amplience.net cdn.media.amplience.net *.staging.bigcontent.io i8.amplience.net cdn.static.amplience.net api.amplience.net auth.amplience.net pandora.a.bigcontent.io 'nonce-ApxslkMlGuB34TBjkiIdiA==' 'strict-dynamic' 'unsafe-inline' storage.googleapis.com static.cloudflareinsights.com app.contentsquare.com www.clarity.ms *.clarity.ms cdn.jsdelivr.net *.klarna.com *.getblue.io 'unsafe-eval';connect-src 'self' *.commercecloud.salesforce.com *.dol.api.pandoradigital.io pandora.a.bigcontent.io data: gstatic:* localhost:* *.pt-engravingui.spark.ui.pandoradigital.io *.spark.ui.pandoradigital.io *.pandora.net *.launchdarkly.com cdn.cookielaw.org *.doubleclick.net bat.bing.com *.facebook.com *.api.cquotient.com consent.linksynergy.com *.kampyle.com sc-static.net *.teads.tv d.impactradius-event.com cdn.tkrconnector.com *.adnxs.com s.yimg.com s.yimg.jp *.yimg.jp s.yjtag.jp *.yjtag.jp *.attn.tv *.cloudfront.net *.demdex.net google.com *.google.com *.google.dk *.google.co.uk *.google.de *.google.fr *.google.it *.google.ca *.google.com.au *.google.pl *.google.es *.google.com.mx *.google.co.za *.google.com.hk *.google.co.jp *.google.co.nz *.google.com.sg *.google.at *.google.be *.google.cz *.google.gr *.google.hu *.google.ie *.google.nl *.google.no *.google.pt *.google.ro *.google.sk *.google.se *.google.ch *.google.com.tr *.google.ae *.newrelic.com *.pangle-ads.com *.everesttech.net *.yahoo.com *.yahoo.co.jp *.amazon-adsystem.com *.snapchat.com *.salecycle.com wss://ws.salecycle.com *.attentivemobile.com *.sc-trc.com *.tealiumiq.com *.googleadservices.com *.brcdn.com *.nr-data.net *.brsrvr.com *.demandware.net *.contentsquare.net *.pinimg.com *.pinterest.com ct.pinterest.com *.monetate.net *.dwin1.com *.akstat.io *.go-mpulse.net *.analytics.tiktok.com heapanalytics.com *.googletagmanager.com analytics.tiktok.com api.cquotient.com *.media.qmutator.com cdn.livechatinc.com api.livechatinc.com pixel.mediaiqdigital.com secure.adnxs.com app.amplience.net smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.sandbox.my.salesforce.com *.sandbox.my.site.com *.sandbox.my.salesforce-setup.com *.sandbox.my.salesforce-scrt.com *.my.salesforce-scrt.com *.my.salesforce-setup.com *.my.site.com *.my.salesforce.com *.criteo.com d.line-scdn.net track.effiliation.com *.creativecdn.com *.nunami.ai pandora.evyy.net *.impct.site *.smaato.net *.rakuten.com *.line.me *.mathtag.com pixel.mathtag.com *.klarna.com *.klarnaservices.com *.paypal.com *.paypalobjects.com *.afterpay.com *.yotpo.com *.adgile.media cdn.shopify.com *.sjv.io perfmaker.net *.perfmaker.net ban.2trk.info *.ban.2trk.info tags.tiqcdn.com tags.tiqcdn.cn tags-eu.tiqcdn.com connect.facebook.net tag.rmp.rakuten.com pandora-pixel.netlify.app *.googlesyndication.com *.onetrust.com *.roeyecdn.com *.akamaihd.net *.mobify-storefront.com https://runtime.commercecloud.com *.flickity.pkgd.min.js *.heap-api.com *.medallia.com *.videobeat.net *.bloomreach.com *.exponea.com *.pandora.net *.exp.pandora.net *.cdn.content.amplience.net cdn.media.amplience.net *.staging.bigcontent.io i8.amplience.net cdn.static.amplience.net api.amplience.net auth.amplience.net pandora.a.bigcontent.io ws://localhost:* wss://localhost:* ws://127.0.0.1:* wss://127.0.0.1:* ws://0.0.0.0:* wss://0.0.0.0:* privacyportal-eu.onetrust.com *.vwli.net *.clarity.ms blob: *.gstatic.com *.login.microsoftonline.com;frame-src 'self' *.commercecloud.salesforce.com *.dol.api.pandoradigital.io pandora.a.bigcontent.io data: gstatic:* localhost:* *.pt-engravingui.spark.ui.pandoradigital.io *.spark.ui.pandoradigital.io *.pandora.net *.launchdarkly.com cdn.cookielaw.org *.doubleclick.net bat.bing.com *.facebook.com *.api.cquotient.com consent.linksynergy.com *.kampyle.com sc-static.net *.teads.tv d.impactradius-event.com cdn.tkrconnector.com *.adnxs.com s.yimg.com s.yimg.jp *.yimg.jp s.yjtag.jp *.yjtag.jp *.attn.tv *.cloudfront.net *.demdex.net google.com *.google.com *.google.dk *.google.co.uk *.google.de *.google.fr *.google.it *.google.ca *.google.com.au *.google.pl *.google.es *.google.com.mx *.google.co.za *.google.com.hk *.google.co.jp *.google.co.nz *.google.com.sg *.google.at *.google.be *.google.cz *.google.gr *.google.hu *.google.ie *.google.nl *.google.no *.google.pt *.google.ro *.google.sk *.google.se *.google.ch *.google.com.tr *.google.ae *.newrelic.com *.pangle-ads.com *.everesttech.net *.yahoo.com *.yahoo.co.jp *.amazon-adsystem.com *.snapchat.com *.salecycle.com wss://ws.salecycle.com *.attentivemobile.com *.sc-trc.com *.tealiumiq.com *.googleadservices.com *.brcdn.com *.nr-data.net *.brsrvr.com *.demandware.net *.contentsquare.net *.pinimg.com *.pinterest.com ct.pinterest.com *.monetate.net *.dwin1.com *.akstat.io *.go-mpulse.net *.analytics.tiktok.com heapanalytics.com *.googletagmanager.com analytics.tiktok.com api.cquotient.com *.media.qmutator.com cdn.livechatinc.com api.livechatinc.com pixel.mediaiqdigital.com secure.adnxs.com app.amplience.net smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.sandbox.my.salesforce.com *.sandbox.my.site.com *.sandbox.my.salesforce-setup.com *.sandbox.my.salesforce-scrt.com *.my.salesforce-scrt.com *.my.salesforce-setup.com *.my.site.com *.my.salesforce.com *.criteo.com d.line-scdn.net track.effiliation.com *.creativecdn.com *.nunami.ai pandora.evyy.net *.impct.site *.smaato.net *.rakuten.com *.line.me *.mathtag.com pixel.mathtag.com *.klarna.com *.klarnaservices.com *.paypal.com *.paypalobjects.com *.afterpay.com *.yotpo.com *.adgile.media cdn.shopify.com *.sjv.io perfmaker.net *.perfmaker.net ban.2trk.info *.ban.2trk.info *.cdn.content.amplience.net cdn.media.amplience.net *.staging.bigcontent.io i8.amplience.net cdn.static.amplience.net api.amplience.net auth.amplience.net pandora.a.bigcontent.io *.googlesyndication.com *.campaign.playable.com *.getblue.io;child-src blob: localhost:* *.pandora.net;media-src 'self' *.cdn.content.amplience.net cdn.media.amplience.net *.staging.bigcontent.io i8.amplience.net cdn.static.amplience.net api.amplience.net auth.amplience.net pandora.a.bigcontent.io smct.co *.smct.co smct.io *.smct.io *.amazonaws.com;frame-ancestors 'self' *.amplience.net https://runtime.commercecloud.com https://*.commercecloud.com;style-src 'unsafe-inline' heapanalytics.com https://cdn.fonts.net *.monetate.net pvapandora.blob.core.windows.net fonts.googleapis.com smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.sandbox.my.salesforce.com *.sandbox.my.site.com *.sandbox.my.salesforce-setup.com *.sandbox.my.salesforce-scrt.com *.my.salesforce-scrt.com *.my.salesforce-setup.com *.my.site.com *.my.salesforce.com localhost:* *.spark.ui.pandoradigital.io *.gstatic.com *.klarnacdn.net *.paypalobjects.com *.yotpo.com perfmaker.net *.perfmaker.net;font-src 'self' heapanalytics.com data: https://cdn.fonts.net *.monetate.net smct.co *.smct.co smct.io *.smct.io *.amazonaws.com localhost:* *.spark.ui.pandoradigital.io *.klarnacdn.net *.paypalobjects.com *.yotpo.com cdn.shopify.com;upgrade-insecure-requests;default-src 'self';base-uri 'self';block-all-mixed-content;object-src 'none';script-src-attr 'none'