wardahbeauty.com Review

 N/A

HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Tue, 26 Aug 2025 02:56:37 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://wardahbeauty.com:443/

HTTP/1.1 200 OK
Date: Tue, 26 Aug 2025 02:56:38 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.18.0 (Ubuntu)
Content-Security-Policy: default-src 'self'; connect-src https://cdn.revieve.com/api/4/config/eeryENj7yQ https://partner.revieve.com https://d38knilzwtuys1.cloudfront.net https://sst.revieve.com https://partner-test.revieve.com 'self' https://www.google-analytics.com https://api.country.is https://api-international.wardahbeauty.com https://qismo.qiscus.com https://www.facebook.com https://z-m-graph.facebook.com https://plugins.makeupar.com https://plugins-media.makeupar.com https://web.facebook.com https://z-p3-graph.facebook.com https://graph.facebook.com https://www.paypal.com https://www.sandbox.paypal.com; font-src https://d38knilzwtuys1.cloudfront.net 'self' fonts.googleapis.com fonts.gstatic.com webpack://* data: https://plugins-media.makeupar.com https://cdnjs.cloudflare.com; frame-src blob: http://multichannel.qiscus.com https://www.sandbox.paypal.com https://www.paypal.com accounts.google.com https://demo-app.test.skintelligentlab.com https://app.prod.skintelligentlab.com; img-src https://d2jlkn4m127vak.cloudfront.net https://d38knilzwtuys1.cloudfront.net https://s3-ap-southeast-1.amazonaws.com 'self' https://api-international.wardahbeauty.com  data: blob: https://www.paypalobjects.com https://fonts.gstatic.com https://www.googletagmanager.com https://wonderly-testing.s3.ap-southeast-3.amazonaws.com https://wardah-international-staging.s3.ap-southeast-1.amazonaws.com https://wardah-international-production.s3.ap-southeast-1.amazonaws.com/ https://web.facebook.com; manifest-src 'self' https://d38knilzwtuys1.cloudfront.net; media-src 'self' ; object-src data:; script-src https://d38knilzwtuys1.cloudfront.net https://s3-ap-southeast-1.amazonaws.com ''unsafe-eval' 'unsafe-inline' 'unsafe-eval' 'self' https://www.googletagmanager.com accounts.google.com/gsi/client connect.facebook.net/en_US/sdk.js accounts.google.com/gsi/style https://plugins-media.makeupar.com https://demo-app.test.skintelligentlab.com https://app.prod.skintelligentlab.com https://www.paypal.com; style-src https://d38knilzwtuys1.cloudfront.net https://qiscus-sdk.s3-ap-southeast-1.amazonaws.com 'self' fonts.googleapis.com accounts.google.com/gsi/style 'unsafe-inline' https://www.googletagmanager.com/debug/badge.css https://googletagmanager.com https://cdnjs.cloudflare.com; worker-src 'self' blob:; form-action 'self'; frame-ancestors 'self'
Strict-Transport-Security: max-age=345600; includeSubDomains
X-Frame-Options: deny
X-Download-Options: noopen
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
X-Powered-By: Next.js
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Vary: Accept-Encoding
Content-Encoding: gzip