victoriassecret.ro Review

 N/A

HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Tue, 19 Aug 2025 10:31:18 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://victoriassecret.ro:443/

HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Tue, 19 Aug 2025 10:31:19 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://victoriassecret.ro:443/vs

HTTP/1.1 200 OK
Date: Tue, 19 Aug 2025 10:31:20 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Content-Security-Policy: script-src 'nonce-74b47db6001bd46f857f9c1f4b629a5caace91380f47abafcf851d0ba77d4020' assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.hsforms.net *.hsforms.com https://maps.googleapis.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.disqus.com https://cdnjs.cloudflare.com *.gstatic.com 'self' 'unsafe-eval' unpkg.com *.cookiebot.com *.packeta.com *.trustmate.io trustmate.io *.googleapis.com *.google-analytics.com cdnjs.cloudflare.com assets.zendesk.com *.connect.facebook.net *.googletagmanager.com *.ingest.sentry.io 'unsafe-hashes' *.admin.victoriassecret.pl connect.facebook.net *.criteo.com *.hotjar.com *.webgains.io *.tiktok.com *.bing.com *.1rx.io d5yoctgpv4cpx.cloudfront.net *.victoriassecret.pl *.victoriassecret.cz *.victoriassecret.ro *.bathandbodyworks.pl *.bathandbodyworks.cz *.bathandbodyworks.ro *.thebodyshop.pl nonce-9cc1077a27e1adcdf191a01e929920e9a700e4ec9fd53298b4988fbe1ba6a70f nonce-e2c74438b1a7801351cee42347d1c46464136506ff7af426fd57687ddc8becf0 *.seznam.cz track.webgains.com analytics.webgains.io *.sovendus.com 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8='; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.googleapis.com https://cdnjs.cloudflare.com maxcdn.bootstrapcdn.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline' *.trustmate.io trustmate.io *.victoriassecret.pl *.victoriassecret.cz *.victoriassecret.ro *.bathandbodyworks.pl *.bathandbodyworks.cz *.bathandbodyworks.ro *.thebodyshop.pl; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.adyen.com pay.google.com *.payments-amazon.com *.media-amazon.com *.paypalobjects.com *.hsforms.net *.hsforms.com https://maps.googleapis.com https://maps.gstatic.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com 'self' data: 'self' *.spartaloyalty.com spartaloyalty.com *.trustmate.io trustmate.io *.google-analytics.com *.google.com *.googletagmanager.com *.google.de *.google.pl *.google.cz *.google.ro *.googleapis.com *.cookiebot.com *.facebook.com *.doubleclick.net *.bidswitch.net *.adnxs.com *.smartadserver.com *.taboola.com *.omnitagjs.com *.casalemedia.com *.criteo.com id5-sync.com *.360yield.com *.ivitrack.com *.media.net *.mediavine.com *.postrelease.com *.outbrain.com *.pubmatic.com *.rubiconproject.com *.sharethrough.com *.teads.tv *.tremorhub.com *.3lift.com *.twiago.com *.yieldlab.net *.yieldmo.com *.emxdgt.com *.1rx.io *.bing.com *.victoriassecret.pl *.victoriassecret.cz *.victoriassecret.ro *.bathandbodyworks.pl *.bathandbodyworks.cz *.bathandbodyworks.ro *.thebodyshop.pl *.app3.salesmanago.pl *.seznam.cz *.sovendus.com; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.adyen.com payments-eu.amazon.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://maps.googleapis.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.google-analytics.com 'self' *.fwc.pl *.cookiebot.com *.trustmate.io trustmate.io *.facebook.com *.packeta.com *.googletagmanager.com *.ingest.sentry.io *.googleapis.com *.analytics.google.com *.doubleclick.net *.criteo.com *.hotjar.com *.hotjar.io *.tiktok.com rkkck31tec.execute-api.eu-central-1.amazonaws.com *.victoriassecret.pl *.victoriassecret.cz *.victoriassecret.ro *.bathandbodyworks.pl *.bathandbodyworks.cz *.bathandbodyworks.ro *.thebodyshop.pl * track.webgains.com api.webgains.io; media-src *.adobe.com 'self' *.victoriassecret.pl *.victoriassecret.cz *.victoriassecret.ro *.bathandbodyworks.pl *.bathandbodyworks.cz *.bathandbodyworks.ro *.thebodyshop.pl; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.adyen.com pay.google.com 'self' *.packeta.com *.cookiebot.com *.gstatic.com assets.zendesk.com *.facebook.com s-static.ak.facebook.com tautt.zendesk.com *.dhl.pl *.dhl24.com.pl *.salesmanago.pl *.doubleclick.net *.criteo.com *.criteo.net *; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.adyen.com pay.google.com payments-eu.amazon.com *.amazon.de 'self' *; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.gstatic.com https://cdnjs.cloudflare.com maxcdn.bootstrapcdn.com 'self' data: 'self' *.googleapis.com; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googleapis.com 'self' *.victoriassecret.pl *.victoriassecret.cz *.victoriassecret.ro *.bathandbodyworks.pl *.bathandbodyworks.cz *.bathandbodyworks.ro *.thebodyshop.pl 'unsafe-inline' *.clarity.ms *.bing.com *.seznam.cz *.sovendus.com;
Link: ; rel="preload"; as="script"; fetchpriority="high", ; rel="preload"; as="script"; fetchpriority="high", ; rel="preload"; as="script"; fetchpriority="high", ; rel="preload"; as="style"; fetchpriority="high", ; rel="preload"; as="script"; fetchpriority="high", ; rel="preload"; as="script"; fetchpriority="high", ; rel="preload"; as="style"; fetchpriority="high"
Content-Encoding: gzip
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Permissions-Policy: autoplay=(self), fullscreen=(self), geolocation=(self), payment=(self)