HTTP/1.1 200 OK
Date: Fri, 07 Nov 2025 07:47:04 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: br
CF-Ray: 99ab38702bc06cfb-SEA
CF-Cache-Status: DYNAMIC
Access-Control-Allow-Origin: *
Age: 377
Cache-Control: public, max-age=600, s-maxage=600
Set-Cookie: c_seg=everyone_price; path=/; Secure; SameSite=strict
Set-Cookie: experienceABTest=gemini; path=/; Secure; SameSite=lax
Set-Cookie: _ld_bucket=2542; path=/; Secure; SameSite=lax
Set-Cookie: mpt_exc=true; path=/; Secure; SameSite=lax
Set-Cookie: __cf_bm=wJrdnjgGR7jMvK3UePrBzNx45FgFxmk09R25YONR4ww-1762501624-1.0.1.1-Xi2u8S7q98dKHuYdsBMMsuYJCZ1CCm312ZlqG3um02vzL8M0cJmFsF16DbfV2azLKzzCfkCHebFfkxQeMHTRrWCpoBf7rKD_p9DerqZp86A; path=/; domain=.es.pandora.net; Secure; HttpOnly; SameSite=none
Strict-Transport-Security: max-age=15552000; includeSubDomains
Vary: Accept-Encoding
Via: 1.1 40395c9e626aaaefe35a638d804ce9e4.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
content-security-policy: img-src 'self' *.commercecloud.salesforce.com *.dol.api.pandoradigital.io pandora.a.bigcontent.io data: gstatic:* localhost:* *.pt-engravingui.spark.ui.pandoradigital.io *.spark.ui.pandoradigital.io *.pandora.net *.launchdarkly.com cdn.cookielaw.org *.doubleclick.net bat.bing.com *.facebook.com *.api.cquotient.com consent.linksynergy.com *.kampyle.com sc-static.net *.teads.tv d.impactradius-event.com cdn.tkrconnector.com *.adnxs.com s.yimg.com s.yimg.jp *.yimg.jp s.yjtag.jp *.yjtag.jp *.attn.tv *.cloudfront.net *.demdex.net google.com *.google.com *.google.dk *.google.co.uk *.google.de *.google.fr *.google.it *.google.ca *.google.com.au *.google.pl *.google.es *.google.com.mx *.google.co.za *.google.com.hk *.google.co.jp *.google.co.nz *.google.com.sg *.google.at *.google.be *.google.cz *.google.gr *.google.hu *.google.ie *.google.nl *.google.no *.google.pt *.google.ro *.google.sk *.google.se *.google.ch *.google.com.tr *.google.ae *.newrelic.com *.pangle-ads.com *.everesttech.net *.yahoo.com *.yahoo.co.jp *.amazon-adsystem.com *.snapchat.com *.salecycle.com wss://ws.salecycle.com *.attentivemobile.com *.sc-trc.com *.tealiumiq.com *.googleadservices.com *.brcdn.com *.nr-data.net *.brsrvr.com *.demandware.net *.contentsquare.net *.pinimg.com *.pinterest.com ct.pinterest.com *.monetate.net *.dwin1.com *.akstat.io *.go-mpulse.net *.analytics.tiktok.com heapanalytics.com *.googletagmanager.com analytics.tiktok.com api.cquotient.com *.media.qmutator.com cdn.livechatinc.com api.livechatinc.com pixel.mediaiqdigital.com secure.adnxs.com app.amplience.net smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.sandbox.my.salesforce.com *.sandbox.my.site.com *.sandbox.my.salesforce-setup.com *.sandbox.my.salesforce-scrt.com *.my.salesforce-scrt.com *.my.salesforce-setup.com *.my.site.com *.my.salesforce.com *.criteo.com d.line-scdn.net track.effiliation.com *.creativecdn.com *.nunami.ai pandora.evyy.net *.impct.site *.smaato.net *.rakuten.com *.line.me *.mathtag.com pixel.mathtag.com *.klarna.com *.klarnaservices.com *.paypal.com *.paypalobjects.com *.afterpay.com *.yotpo.com *.adgile.media cdn.shopify.com *.cdn.content.amplience.net cdn.media.amplience.net *.staging.bigcontent.io i8.amplience.net cdn.static.amplience.net api.amplience.net auth.amplience.net pandora.a.bigcontent.io *.googlesyndication.com *.roeye.com *.loggly.com localhost:* blob: pandora.a.bigcontent.io *.line.me;script-src 'self' *.commercecloud.salesforce.com *.dol.api.pandoradigital.io pandora.a.bigcontent.io data: gstatic:* localhost:* *.pt-engravingui.spark.ui.pandoradigital.io *.spark.ui.pandoradigital.io *.pandora.net *.launchdarkly.com cdn.cookielaw.org *.doubleclick.net bat.bing.com *.facebook.com *.api.cquotient.com consent.linksynergy.com *.kampyle.com sc-static.net *.teads.tv d.impactradius-event.com cdn.tkrconnector.com *.adnxs.com s.yimg.com s.yimg.jp *.yimg.jp s.yjtag.jp *.yjtag.jp *.attn.tv *.cloudfront.net *.demdex.net google.com *.google.com *.google.dk *.google.co.uk *.google.de *.google.fr *.google.it *.google.ca *.google.com.au *.google.pl *.google.es *.google.com.mx *.google.co.za *.google.com.hk *.google.co.jp *.google.co.nz *.google.com.sg *.google.at *.google.be *.google.cz *.google.gr *.google.hu *.google.ie *.google.nl *.google.no *.google.pt *.google.ro *.google.sk *.google.se *.google.ch *.google.com.tr *.google.ae *.newrelic.com *.pangle-ads.com *.everesttech.net *.yahoo.com *.yahoo.co.jp *.amazon-adsystem.com *.snapchat.com *.salecycle.com wss://ws.salecycle.com *.attentivemobile.com *.sc-trc.com *.tealiumiq.com *.googleadservices.com *.brcdn.com *.nr-data.net *.brsrvr.com *.demandware.net *.contentsquare.net *.pinimg.com *.pinterest.com ct.pinterest.com *.monetate.net *.dwin1.com *.akstat.io *.go-mpulse.net *.analytics.tiktok.com heapanalytics.com *.googletagmanager.com analytics.tiktok.com api.cquotient.com *.media.qmutator.com cdn.livechatinc.com api.livechatinc.com pixel.mediaiqdigital.com secure.adnxs.com app.amplience.net smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.sandbox.my.salesforce.com *.sandbox.my.site.com *.sandbox.my.salesforce-setup.com *.sandbox.my.salesforce-scrt.com *.my.salesforce-scrt.com *.my.salesforce-setup.com *.my.site.com *.my.salesforce.com *.criteo.com d.line-scdn.net track.effiliation.com *.creativecdn.com *.nunami.ai pandora.evyy.net *.impct.site *.smaato.net *.rakuten.com *.line.me *.mathtag.com pixel.mathtag.com *.klarna.com *.klarnaservices.com *.paypal.com *.paypalobjects.com *.afterpay.com *.yotpo.com *.adgile.media cdn.shopify.com tags.tiqcdn.com tags.tiqcdn.cn tags-eu.tiqcdn.com connect.facebook.net tag.rmp.rakuten.com pandora-pixel.netlify.app *.googlesyndication.com *.onetrust.com *.roeyecdn.com *.akamaihd.net *.mobify-storefront.com https://runtime.commercecloud.com *.flickity.pkgd.min.js *.heap-api.com *.medallia.com *.videobeat.net *.bloomreach.com *.exponea.com *.pandora.net *.exp.pandora.net *.cdn.content.amplience.net cdn.media.amplience.net *.staging.bigcontent.io i8.amplience.net cdn.static.amplience.net api.amplience.net auth.amplience.net pandora.a.bigcontent.io 'nonce-o878gd+4ufOzMXLko4/juw==' 'strict-dynamic' 'unsafe-inline' storage.googleapis.com static.cloudflareinsights.com app.contentsquare.com www.clarity.ms *.clarity.ms cdn.jsdelivr.net *.klarna.com *.getblue.io 'unsafe-eval';connect-src 'self' *.commercecloud.salesforce.com *.dol.api.pandoradigital.io pandora.a.bigcontent.io data: gstatic:* localhost:* *.pt-engravingui.spark.ui.pandoradigital.io *.spark.ui.pandoradigital.io *.pandora.net *.launchdarkly.com cdn.cookielaw.org *.doubleclick.net bat.bing.com *.facebook.com *.api.cquotient.com consent.linksynergy.com *.kampyle.com sc-static.net *.teads.tv d.impactradius-event.com cdn.tkrconnector.com *.adnxs.com s.yimg.com s.yimg.jp *.yimg.jp s.yjtag.jp *.yjtag.jp *.attn.tv *.cloudfront.net *.demdex.net google.com *.google.com *.google.dk *.google.co.uk *.google.de *.google.fr *.google.it *.google.ca *.google.com.au *.google.pl *.google.es *.google.com.mx *.google.co.za *.google.com.hk *.google.co.jp *.google.co.nz *.google.com.sg *.google.at *.google.be *.google.cz *.google.gr *.google.hu *.google.ie *.google.nl *.google.no *.google.pt *.google.ro *.google.sk *.google.se *.google.ch *.google.com.tr *.google.ae *.newrelic.com *.pangle-ads.com *.everesttech.net *.yahoo.com *.yahoo.co.jp *.amazon-adsystem.com *.snapchat.com *.salecycle.com wss://ws.salecycle.com *.attentivemobile.com *.sc-trc.com *.tealiumiq.com *.googleadservices.com *.brcdn.com *.nr-data.net *.brsrvr.com *.demandware.net *.contentsquare.net *.pinimg.com *.pinterest.com ct.pinterest.com *.monetate.net *.dwin1.com *.akstat.io *.go-mpulse.net *.analytics.tiktok.com heapanalytics.com *.googletagmanager.com analytics.tiktok.com api.cquotient.com *.media.qmutator.com cdn.livechatinc.com api.livechatinc.com pixel.mediaiqdigital.com secure.adnxs.com app.amplience.net smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.sandbox.my.salesforce.com *.sandbox.my.site.com *.sandbox.my.salesforce-setup.com *.sandbox.my.salesforce-scrt.com *.my.salesforce-scrt.com *.my.salesforce-setup.com *.my.site.com *.my.salesforce.com *.criteo.com d.line-scdn.net track.effiliation.com *.creativecdn.com *.nunami.ai pandora.evyy.net *.impct.site *.smaato.net *.rakuten.com *.line.me *.mathtag.com pixel.mathtag.com *.klarna.com *.klarnaservices.com *.paypal.com *.paypalobjects.com *.afterpay.com *.yotpo.com *.adgile.media cdn.shopify.com tags.tiqcdn.com tags.tiqcdn.cn tags-eu.tiqcdn.com connect.facebook.net tag.rmp.rakuten.com pandora-pixel.netlify.app *.googlesyndication.com *.onetrust.com *.roeyecdn.com *.akamaihd.net *.mobify-storefront.com https://runtime.commercecloud.com *.flickity.pkgd.min.js *.heap-api.com *.medallia.com *.videobeat.net *.bloomreach.com *.exponea.com *.pandora.net *.exp.pandora.net *.cdn.content.amplience.net cdn.media.amplience.net *.staging.bigcontent.io i8.amplience.net cdn.static.amplience.net api.amplience.net auth.amplience.net pandora.a.bigcontent.io ws://localhost:* wss://localhost:* ws://127.0.0.1:* wss://127.0.0.1:* ws://0.0.0.0:* wss://0.0.0.0:* privacyportal-eu.onetrust.com *.vwli.net *.clarity.ms blob: *.gstatic.com *.login.microsoftonline.com;frame-src 'self' *.commercecloud.salesforce.com *.dol.api.pandoradigital.io pandora.a.bigcontent.io data: gstatic:* localhost:* *.pt-engravingui.spark.ui.pandoradigital.io *.spark.ui.pandoradigital.io *.pandora.net *.launchdarkly.com cdn.cookielaw.org *.doubleclick.net bat.bing.com *.facebook.com *.api.cquotient.com consent.linksynergy.com *.kampyle.com sc-static.net *.teads.tv d.impactradius-event.com cdn.tkrconnector.com *.adnxs.com s.yimg.com s.yimg.jp *.yimg.jp s.yjtag.jp *.yjtag.jp *.attn.tv *.cloudfront.net *.demdex.net google.com *.google.com *.google.dk *.google.co.uk *.google.de *.google.fr *.google.it *.google.ca *.google.com.au *.google.pl *.google.es *.google.com.mx *.google.co.za *.google.com.hk *.google.co.jp *.google.co.nz *.google.com.sg *.google.at *.google.be *.google.cz *.google.gr *.google.hu *.google.ie *.google.nl *.google.no *.google.pt *.google.ro *.google.sk *.google.se *.google.ch *.google.com.tr *.google.ae *.newrelic.com *.pangle-ads.com *.everesttech.net *.yahoo.com *.yahoo.co.jp *.amazon-adsystem.com *.snapchat.com *.salecycle.com wss://ws.salecycle.com *.attentivemobile.com *.sc-trc.com *.tealiumiq.com *.googleadservices.com *.brcdn.com *.nr-data.net *.brsrvr.com *.demandware.net *.contentsquare.net *.pinimg.com *.pinterest.com ct.pinterest.com *.monetate.net *.dwin1.com *.akstat.io *.go-mpulse.net *.analytics.tiktok.com heapanalytics.com *.googletagmanager.com analytics.tiktok.com api.cquotient.com *.media.qmutator.com cdn.livechatinc.com api.livechatinc.com pixel.mediaiqdigital.com secure.adnxs.com app.amplience.net smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.sandbox.my.salesforce.com *.sandbox.my.site.com *.sandbox.my.salesforce-setup.com *.sandbox.my.salesforce-scrt.com *.my.salesforce-scrt.com *.my.salesforce-setup.com *.my.site.com *.my.salesforce.com *.criteo.com d.line-scdn.net track.effiliation.com *.creativecdn.com *.nunami.ai pandora.evyy.net *.impct.site *.smaato.net *.rakuten.com *.line.me *.mathtag.com pixel.mathtag.com *.klarna.com *.klarnaservices.com *.paypal.com *.paypalobjects.com *.afterpay.com *.yotpo.com *.adgile.media cdn.shopify.com *.cdn.content.amplience.net cdn.media.amplience.net *.staging.bigcontent.io i8.amplience.net cdn.static.amplience.net api.amplience.net auth.amplience.net pandora.a.bigcontent.io *.googlesyndication.com *.campaign.playable.com *.getblue.io;child-src blob: localhost:* *.pandora.net;media-src 'self' *.cdn.content.amplience.net cdn.media.amplience.net *.staging.bigcontent.io i8.amplience.net cdn.static.amplience.net api.amplience.net auth.amplience.net pandora.a.bigcontent.io smct.co *.smct.co smct.io *.smct.io *.amazonaws.com;frame-ancestors 'self' *.amplience.net https://runtime.commercecloud.com https://*.commercecloud.com;style-src 'unsafe-inline' heapanalytics.com https://cdn.fonts.net *.monetate.net pvapandora.blob.core.windows.net fonts.googleapis.com smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.sandbox.my.salesforce.com *.sandbox.my.site.com *.sandbox.my.salesforce-setup.com *.sandbox.my.salesforce-scrt.com *.my.salesforce-scrt.com *.my.salesforce-setup.com *.my.site.com *.my.salesforce.com localhost:* *.spark.ui.pandoradigital.io *.gstatic.com *.klarnacdn.net *.paypalobjects.com *.yotpo.com;font-src 'self' heapanalytics.com data: https://cdn.fonts.net *.monetate.net smct.co *.smct.co smct.io *.smct.io *.amazonaws.com localhost:* *.spark.ui.pandoradigital.io *.klarnacdn.net *.paypalobjects.com *.yotpo.com cdn.shopify.com;upgrade-insecure-requests;default-src 'self';base-uri 'self';block-all-mixed-content;object-src 'none';script-src-attr 'none'
expect-ct: max-age=0
referrer-policy: no-referrer
x-amz-apigw-id: TqZTyHymFiAEHNg=
x-amz-cf-id: M18LzW6kUzvmK3F9fOVmEYw_gj33oaX28IGxk_zYHAf01tJDU9gPuw==
x-amz-cf-pop: SEA900-P2
x-amzn-remapped-connection: keep-alive
x-amzn-remapped-content-length: 740181
x-amzn-remapped-date: Fri, 07 Nov 2025 07:40:47 GMT
x-amzn-requestid: 565aab1a-455a-48a6-b7be-8755cafe899c
x-amzn-trace-id: Root=1-690da27e-3c3e57881fcc8ce903e0e46a;Parent=7cc60e8b111f77a5;Sampled=0;Lineage=1:ba98698a:0
x-cache: Hit from cloudfront
x-content-type-options: nosniff
x-correlation-id: 6c1a217a-129e-4ad7-a6b7-85610ccbcf76
x-dns-prefetch-control: off
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-xss-protection: 0
Server: cloudflare