klarna.com Review

 N/A

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 30 Aug 2025 04:13:44 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://klarna.com/
X-Cache: Redirect from cloudfront
Via: 1.1 08e02d8752214435881611cd88b0012a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: NRT12-P5
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: nBNNhFNbebuZzUHvODmAvob9wVVSQJLfe7nkDFiQJKmq8uKef0c-7g==

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 30 Aug 2025 04:13:44 GMT
Content-Length: 0
Connection: keep-alive
Location: https://www.klarna.com/
X-Cache: FunctionGeneratedResponse from cloudfront
Via: 1.1 18855c649fddbff6203c46f792687008.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: NRT20-P2
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: Da_uc2fL8IE-tD0ryfyKWkiAaycl-tF2yqZ6lvGJZBWJLcbYSGQCfw==

HTTP/1.1 307 Temporary Redirect
Content-Type: text/html; charset=utf-8
Content-Length: 90
Connection: keep-alive
Date: Sat, 30 Aug 2025 04:13:45 GMT
server: envoy
klarna-correlation-id: 18bb3ed0-68bd-4d3e-98e7-f530deceb8a3
surrogate-control: no-store
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
expires: 0
cross-origin-embedder-policy: unsafe-none
origin-agent-cluster: ?1
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-permitted-cross-domain-policies: none
content-security-policy: default-src 'self';script-src 'self' 'strict-dynamic' 'nonce-18bb3ed0-68bd-4d3e-98e7-f530deceb8a3' 'report-sample' https://owp.klarna.com/ https://cdn.cookielaw.org/;style-src 'self' 'unsafe-inline' 'report-sample' https://owp.klarna.com/ https://www.gstatic.com/;img-src 'self' data: blob: https: chrome-extension:;media-src 'self' data: https: blob:;connect-src 'self' *.google.com *.google-analytics.com *.googlesyndication.com *.googletagmanager.com www.googleadservices.com *.adtrafficquality.google fonts.googleapis.com translate.googleapis.com fonts.gstatic.com www.gstatic.com ssl.google-analytics.com csi.gstatic.com *.g.doubleclick.net bat.bing.com *.klarna.com klarna-eu.api.unboxai.com klarna.atlassian.net production.videos.production.eu1.influencer-platform.klarna.net x.klarnacdn.net assets.klarnacdn.net api.videoly.co o24547.ingest.us.sentry.io *.onetrust.com *.cookielaw.org cookies-data.onetrust.io www.youtube.com images.ctfassets.net videos.ctfassets.net images.pricerunner.com *.fullstory.com tr.snapchat.com tr6.snapchat.com sc-static.net player.vimeo.com *.vimeocdn.com ams.creativecdn.com ;font-src 'self' https: data:;frame-src 'self' *.snapchat.com *.klarna.com *.klarnacdn.net *.adtrafficquality.google *.googlesyndication.com *.googletagmanager.com *.googleadservices.com *.googletagservices.com *.doubleclick.net *.google.com www.youtube.com www.youtube-nocookie.com *.criteo.com osm.klarnaservices.com open.spotify.com ams.creativecdn.com hackerone.com neu.mein-onlineantrag.de widget.trustpilot.com;base-uri 'self';manifest-src 'self';object-src 'none';frame-ancestors 'self' *.klarna.com;upgrade-insecure-requests
set-cookie: noGeoredirect=1; Max-Age=300; Path=/; Expires=Sat, 30 Aug 2025 04:18:45 GMT; HttpOnly; Secure
location: /jp/?grs=%2F&grr=https%3A%2F%2Fklarna.com%2F
vary: Accept, Accept-Encoding
x-envoy-upstream-service-time: 1
X-Cache: Miss from cloudfront
Via: 1.1 99057e6beab36f509efb35703e98fcf4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: NRT12-P8
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: x70W3NQ3I68HrbnQknUtV8bUM00J_wxpl9w4GjcY3WqoE7d7vRW2gg==
X-Content-Type-Options: nosniff

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sat, 30 Aug 2025 04:13:45 GMT
x-envoy-upstream-service-time: 70
server: envoy
klarna-correlation-id: fa04c3fe-c7fe-453a-9bfc-5fd76f6d1c85
surrogate-control: no-store
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
expires: 0
cross-origin-embedder-policy: unsafe-none
origin-agent-cluster: ?1
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-permitted-cross-domain-policies: none
content-security-policy: default-src 'self';script-src 'self' 'strict-dynamic' 'nonce-fa04c3fe-c7fe-453a-9bfc-5fd76f6d1c85' 'report-sample' https://owp.klarna.com/ https://cdn.cookielaw.org/;style-src 'self' 'unsafe-inline' 'report-sample' https://owp.klarna.com/ https://www.gstatic.com/;img-src 'self' data: blob: https: chrome-extension:;media-src 'self' data: https: blob:;connect-src 'self' *.google.com *.google-analytics.com *.googlesyndication.com *.googletagmanager.com www.googleadservices.com *.adtrafficquality.google fonts.googleapis.com translate.googleapis.com fonts.gstatic.com www.gstatic.com ssl.google-analytics.com csi.gstatic.com *.g.doubleclick.net bat.bing.com *.klarna.com klarna-eu.api.unboxai.com klarna.atlassian.net production.videos.production.eu1.influencer-platform.klarna.net x.klarnacdn.net assets.klarnacdn.net api.videoly.co o24547.ingest.us.sentry.io *.onetrust.com *.cookielaw.org cookies-data.onetrust.io www.youtube.com images.ctfassets.net videos.ctfassets.net images.pricerunner.com *.fullstory.com tr.snapchat.com tr6.snapchat.com sc-static.net player.vimeo.com *.vimeocdn.com ams.creativecdn.com ;font-src 'self' https: data:;frame-src 'self' *.snapchat.com *.klarna.com *.klarnacdn.net *.adtrafficquality.google *.googlesyndication.com *.googletagmanager.com *.googleadservices.com *.googletagservices.com *.doubleclick.net *.google.com www.youtube.com www.youtube-nocookie.com *.criteo.com osm.klarnaservices.com open.spotify.com ams.creativecdn.com hackerone.com neu.mein-onlineantrag.de widget.trustpilot.com;base-uri 'self';manifest-src 'self';object-src 'none';frame-ancestors 'self' *.klarna.com;upgrade-insecure-requests
link: ; rel=preconnect; crossorigin
etag: W/"42f63-5bwOk3W3zuK4K0mfthNvuNF6rs4"
vary: Accept-Encoding
content-encoding: br
X-Cache: Miss from cloudfront
Via: 1.1 99057e6beab36f509efb35703e98fcf4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: NRT12-P8
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: JUTRFvuNzZraLstLD_uzU0xoRCif01j1TYiEjymzxqa7LjDGDmnTSA==
X-Content-Type-Options: nosniff