Información Técnica
| Código de estado HTTP | 200 |
| Versión HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Dirección IP | 199.116.164.229 |
| Software del servidor | Apache |
| Compresión | gzip |
|
ℹ 🔵 Falta Content Security Policy | No se ha configurado CSP. Ayuda a prevenir ataques XSS e inyección de contenido. |
|
ℹ 🔵 Falta X-Frame-Options | El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking). |
Código de estado HTTP 200
Versión HTTP HTTP/1.1
HTTPS ✔ Disponible
Dirección IP 199.116.164.229
Software del servidor Apache
Compresión gzip
ℹ 🔵 Falta Content Security Policy No se ha configurado CSP. Ayuda a prevenir ataques XSS e inyección de contenido.
ℹ 🔵 Falta X-Frame-Options El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking).
Cadena de Redirecciones
| # | URL | Código de estado HTTP | Estado |
| 1 | https://pandora.com:443 | 301 | HTTP/2 301 |
| 2 | https://www.pandora.com | 302 | HTTP/2 302 |
| 3 | https://www.pandora.com/restricted | 200 | HTTP/2 200 |
#1 URL https://pandora.com:443
Código de estado HTTP 301
Estado HTTP/2 301
#2 URL https://www.pandora.com
Código de estado HTTP 302
Estado HTTP/2 302
#3 URL https://www.pandora.com/restricted
Código de estado HTTP 200
Estado HTTP/2 200
Rendimiento
| Resolución DNS | 4.1 ms |
| Conexión TCP | 142 ms |
| Negociación TLS | 281.9 ms |
| Tiempo hasta el primer byte (TTFB) | 566.8 ms |
| Descarga de contenido | 0.2 ms |
| Tiempo total de respuesta | 567 ms |
Resolución DNS 4.1 ms
Conexión TCP 142 ms
Negociación TLS 281.9 ms
Tiempo hasta el primer byte (TTFB) 566.8 ms
Descarga de contenido 0.2 ms
Tiempo total de respuesta 567 ms
Seguridad
| HTTPS | ✔ Activado |
| HSTS | ✔ max-age=31536000 |
| CSP | ⚠ No configurado |
| X-Frame-Options | ⚠ No configurado |
| X-Content-Type-Options | ⚠ No configurado |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activado
HSTS ✔ max-age=31536000
CSP ⚠ No configurado
X-Frame-Options ⚠ No configurado
X-Content-Type-Options ⚠ No configurado
HTTP/2 ⚠ HTTP/1.1
Comprobación SEO
Título Pandora
Tecnologías Detectadas
| Tecnología | jQuery Google Analytics Google Tag Manager Apache |
Tecnología jQuery Google Analytics Google Tag Manager Apache
Cabeceras HTTP
| Date
| Wed, 22 Jul 2026 23:06:15 GMT |
| Server
| Apache |
| Content-type
| text/html;charset=utf-8 |
| Expires
| Thu, 01 Jan 1970 00:00:00 GMT |
| Vary
| Accept-Encoding,User-Agent |
| Set-cookie
| v2regbstage=;Path=/;Domain=.pandora.com;Expires=Thu, 01-Jan-1970 00:00:00 GMT;Max-Age=0 |
| Content-encoding
| gzip |
| Content-security-policy-report-only
| script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' https://*.savagebeast.com https://pandora.com https://*.pandora.com https://staging.cdn-net.com https://cdn.cookielaw.org https://assets.adobedtm.com https://*.adsafeprotected.com https://ep2.adtrafficquality.google https://fundingchoicesmessages.google.com https://*.googlesyndication.com https://*.google-analytics.com https://www.googletagmanager.com https://www.googletagservices.com https://imasdk.googleapis.com https://storage.googleapis.com https://*.doubleclick.net https://*.doubleverify.com https://pagead2.googlesyndication.com https://s0.2mdn.net https://cdn.branch.io https://app.link https://client.px-cloud.net https://connect.facebook.net https://sb.scorecardresearch.com https://secure-us.imrworldwide.com https://z.moatads.com https://lex.33across.com https://s.adroll.com https://d.adroll.com https://*.adswizz.com https://ads.revjet.com https://pix.revjet.com https://seal.verisign.com https://code.jquery.com https://snap.licdn.com; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub16b313e1658347a16504b662a893cd7e&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env%3Aproduction; report-to csp-endpoint; |
| Reporting-endpoints
| csp-endpoint="https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub16b313e1658347a16504b662a893cd7e&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env%3Aproduction" |
| Content-length
| 9472 |
| Strict-transport-security
| max-age=31536000 |
Date Wed, 22 Jul 2026 23:06:15 GMT
Server Apache
Content-type text/html;charset=utf-8
Expires Thu, 01 Jan 1970 00:00:00 GMT
Vary Accept-Encoding,User-Agent
Set-cookie v2regbstage=;Path=/;Domain=.pandora.com;Expires=Thu, 01-Jan-1970 00:00:00 GMT;Max-Age=0
Content-encoding gzip
Content-security-policy-report-only script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' https://*.savagebeast.com https://pandora.com https://*.pandora.com https://staging.cdn-net.com https://cdn.cookielaw.org https://assets.adobedtm.com https://*.adsafeprotected.com https://ep2.adtrafficquality.google https://fundingchoicesmessages.google.com https://*.googlesyndication.com https://*.google-analytics.com https://www.googletagmanager.com https://www.googletagservices.com https://imasdk.googleapis.com https://storage.googleapis.com https://*.doubleclick.net https://*.doubleverify.com https://pagead2.googlesyndication.com https://s0.2mdn.net https://cdn.branch.io https://app.link https://client.px-cloud.net https://connect.facebook.net https://sb.scorecardresearch.com https://secure-us.imrworldwide.com https://z.moatads.com https://lex.33across.com https://s.adroll.com https://d.adroll.com https://*.adswizz.com https://ads.revjet.com https://pix.revjet.com https://seal.verisign.com https://code.jquery.com https://snap.licdn.com; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub16b313e1658347a16504b662a893cd7e&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env%3Aproduction; report-to csp-endpoint;
Reporting-endpoints csp-endpoint="https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub16b313e1658347a16504b662a893cd7e&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env%3Aproduction"
Content-length 9472
Strict-transport-security max-age=31536000
