bbw.com

1 evidence signal

JS GlobalConstructorioClient → function

Frameworks & Languages3

Chakra UI

UI frameworks

3 evidence signals

HTMLchakra-

css--chakra-

DOMchakra-class

React

JavaScript frameworks

1 evidence signal

HTMLdata-react

React Router

JavaScript frameworks

1 evidence signal

JS Global__reactRouterVersion → string

Analytics & Marketing7

Microsoft 365

1 evidence signal

dnsMX: bbw-com.mail.protection.outlook.com

SendGrid

Cloudflare Browser Insights

1 evidence signal

dnsDKIM selector: s1

Analytics

1 evidence signal

Scripthttps://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015

Google Tag Manager

Tag managers

1 evidence signal

JS GlobaldataLayer → object

Datadogv6.25.4

RUM

2 evidence signals

JS GlobalDD_LOGS → object(v6.25.4)

JS GlobalDD_RUM → object(v6.25.4)

Tealium

Tag managers

2 evidence signals

Scripthttps://tags.tiqcdn.com/utag/bbw/new/prod/utag.sync.js

Scripthttps://tags.tiqcdn.com/utag/bbw/new/prod/utag.js

Yottaa

Tag managers

1 evidence signal

Scripthttps://rapid-cdn.yottaa.com/rapid/lib/wI9DjgjWFD_TGA.js

Infrastructure & Security10

PerimeterX

Security

2 evidence signals

Cookie_pxvid

JS Global_pxAppId → string

Cloudflare DNS

PaaS

1 evidence signal

dnsNS: josephine.ns.cloudflare.com

Cloudflare

2 evidence signals

Headera07adfdcde87a249-SJC

Headercloudflare: cloudflare

OneTrust

Cookie compliance

3 evidence signals

Scripthttps://cdn.cookielaw.org/scripttemplates/otSDKStub.js

HSTS

Security

1 evidence signal

Headermax-age=31557600

Amazon CloudFront

1 evidence signal

Headeru7fEaKFasuxhVAInr5a87u6mb8XXpdd4D5T2WGaDroIZnsFAgRuFhA==

Amazon S3

1 evidence signal

Header

s3[^ ]*amazonaws\.com: img-src 'self' *.commercecloud.salesforce.com *.bathandbodyworks.com *.bathandbodyworks.ca data: *.yottaa.net bat.bing.com *.google.com *.tealiumiq.com *.smaato.net *.pubmatic.com *.rubiconproject.com *.doubleclick.net *.casalemedia.com *.3lift.com *.ads.audio.thisisdax.com *.analytics.yahoo.com *.bazaarvoice.com *.brightcove.com *.brightcovecdn.com *.brsrvr.com *.cookielaw.org *.curalate.com *.dotomi.com *.googleapis.com *.gstatic.com *.mountain.com *.omtrdc.net *.onetrust.com *.openx.net *.paypalobjects.com *.pinterest.com *.zineone.com *.datadoghq.com ads.stickyadstv.com agentcore.s3.amazonaws.com aivo-assets.s3.amazonaws.com ap.lijit.com assets-qelplatam.s3.amazonaws.com bathandbodyworkscc.zendesk.com bh.contextweb.com cdn.cookielaw.org cdn.jsdelivr.net cm.everesttech.net contextual.media.net crb.kargo.com cs.openwebmp.com dpm.demdex.net exchange-match.mediaplex.com https://www.googletagmanager.com/td ib.adnxs.com idsync.live.streamtheworld.com idsync.rlcdn.com match.adsrvr.org match.sharethrough.com mountain.com omtrdc.net partners.tremorhub.com pinterest.com ps.eyeota.net sync.1rx.io sync.bfmio.com sync.ipredictive.com sync.mathtag.com sync.targeting.unrulymedia.com tags.bluekai.com us.ck-ie.com v2assets.zopim.io https://sync.inmobi.com https://sync.crwdcntrl.net https://f.monetate.net https://csync.loopme.me https://www.googleadservices.com https://pixel.adsafeprotected.com https://www.facebook.com/ https://cdn.contentstack.io https://azure-na-images.contentstack.com https://azure-na-cdn.contentstack.com https://personalization-api.us-west-2.prod.tealiumapis.com *.207.net *.rlcdn.com *.smartadserver.com *.attn.tv *.attentivemobile.com *.fwmrm.net *.googletagmanager.com *.medallia.com *.kampyle.com https://pixel.tapad.com;script-src 'self' 'unsafe-inline' blob: storage.googleapis.com localhost:3000 code.jquery.com tags.tiqcdn.com *.yottaa.net *.attn.tv bbwi-us.attn.tv events.attentivemobile.com www.googletagmanager.com *.doubleclick.net *.bathandbodyworks.com *.bathandbodyworks.ca bat.bing.com sc-static.net *.agentbot.net *.attentivemobile.com *.bazaarvoice.com *.brcdn.com *.brightcove.net *.brightcovecdn.com *.byspotify.com *.cdn-apple.com *.cookielaw.org *.curalate.com *.dotomi.com *.googleapis.com *.gstatic.com *.kampyle.com *.monetate.net *.mpsnare.iesnare.com *.onetrust.com *.ordergroove.com *.paypal.com *.pepperjam.com *.pinterest.com *.privacymanager.io *.smaato.net *.tealiumiq.com *.zineone.com *.snapchat.com *.tiktok.com *.datadoghq.com 7316103.collect.igodigital.com api.tnapplications.com assets.adobedtm.com bathbodyworks-pixel.netlify.app cdn.cookielaw.org cdn.quantummetric.com cnstrc.com connect.facebook.net dev.zopim.com engine-global.monetate.net github.com https://*.px-cdn.net https://*.px-cloud.net https://*.yottaa.com https://*.yottaa.net https://s.pinimg.com https://www.google.com/recaptcha/ https://analytics.tiktok.com https://www.gstatic.com/recaptcha/ https://www.onelink-edge.com https://widget-mediator.zopim.com https://cdn.contentstack.io https://azure-na-images.contentstack.com https://azure-na-cdn.contentstack.com https://personalization-api.us-west-2.prod.tealiumapis.com objects.githubusercontent.com privacyportal-cdn.onetrust.com rdf.radial.com static.zdassets.com tst-rdf.radial.com https://dx.mountain.com https://px.mountain.com external.quantummetric.com https://www.googleadservices.com *.medallia.com https://google.com https://cognigy-bucket.s3.eu-west-3.amazonaws.com release-assets.githubusercontent.com *.radial.com *.queue-it.net https://*.queue-it.net https://static.queue-it.net *.riskified.com beacon.riskified.com 'unsafe-eval' https://runtime.commercecloud.com *.site.com;connect-src 'self' api.cquotient.com localhost:3000 dpm.demdex.net bbwi-us.attn.tv events.attentivemobile.com aa.bathandbodyworks.com *.tealiumiq.com *.bathandbodyworks.com *.bathandbodyworks.ca *.restapi.ordergroove.com *.bazaarvoice.com *.googleapis.com *.gstatic.com *.cookielaw.org *.zineone.com *.onetrust.com *.aivo.co *.boltdns.net *.brightcove.com *.brightcovecdn.com *.cognigy.ai *.curalate.com *.mountain.com *.omtrdc.net *.ordergroove.com *.paypal.com *.pinterest.com *.salesforce.com *.zdassets.com *.snapchat.com *.doubleclick.net *.datadoghq.com *.tiktok.com browser-intake-datadoghq.com browser-http-intake.logs.datadoghq.com rum-http-intake.logs.datadoghq.com api.tnapplications.com https://auth-dev.bathandbodyworks.com https://auth-qa.bathandbodyworks.com https://auth.bathandbodyworks.com https://auth-perf.bathandbodyworks.com https://personalization-api.us-west-2.prod.tealiumapis.com bathandbodyworkscc.zendesk.com cdn.cookielaw.org connect.facebook.net crcldu.com endpoint-foundever.cognigy.cloud engine-global.monetate.net engine.monetate.net geo.privacymanager.io geolocation.onetrust.com https://*.px-cdn.net https://*.px-cloud.net https://*.yottaa.net https://www.google.com https://www.google.com/ccm https://www.google.com/ccm/collect https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://www.onelink-edge.com https://auth.pingone.com https://www.facebook.com https://cdn.contentstack.io https://azure-na-images.contentstack.com https://azure-na-cdn.contentstack.com ingest.quantummetric.com mountain.com objects.githubusercontent.com omtrdc.net pinterest.com rdf.radial.com rl.quantummetric.com telemetry.partners.prod.minionplatform.com public.prod.minionplatform.com tst-rdf.radial.com wss://csb.zineone.com wss://endpoint-foundever.cognigy.cloud wss://widget-mediator.zopim.com zendesk-eu.my.sentry.io *.cnstrc.com/ https://pixels.spotify.com wss://cloud.zineone.com https://google.com https://restapi.ordergroove.com https://www.googleadservices.com https://api.rlcdn.com bbw.quantummetric.com https://id.zopim.com/authenticated/web/jwt *.radial.com *.attn.tv *.attentivemobile.com *.queue-it.net https://*.queue-it.net https://static.queue-it.net *.medallia.com *.kampyle.com *.riskified.com beacon.riskified.com https://runtime.commercecloud.com *.salesforce-scrt.com;frame-src https://applepay.cdn-apple.com/ *.aivo.co *.cookielaw.org *.curalate.com *.googleapis.com *.gstatic.com *.onetrust.com *.ordergroove.com *.paypal.com *.pcipal.cloud *.pcipalstaging.cloud *.pinterest.com *.zineone.com *.snapchat.com *.doubleclick.net bathandbody.demdex.net https://recaptcha.google.com/recaptcha/ https://td.doubleclick.net https://analytics.tiktok.com https://www.google.com/recaptcha/ https://www.googletagmanager.com https://www.googleadservices.com https://cdn.contentstack.io https://azure-na-images.contentstack.com https://azure-na-cdn.contentstack.com https://personalization-api.us-west-2.prod.tealiumapis.com ingest.quantummetric.com jqtmdiy716.execute-api.us-east-1.amazonaws.com telemetry.partners.prod.minionplatform.com public.prod.minionplatform.com wss://csb.zineone.com wss://endpoint-foundever.cognigy.cloud http://t.pepperjamnetwork.com cdn.quantummetric.com bbw.quantummetric.com *.radial.com *.auruspay.com/ *.aurusepay.com/ *.attentivemobile.com *.attn.tv *.medallia.com *.kampyle.com *.site.com;media-src *.boltdns.net *.brightcovecdn.com *.curalate.com agentcore.s3.amazonaws.com blob: data: static.zdassets.com *.attentivemobile.com *.attn.tv *.medallia.com *.kampyle.com;default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self' https://runtime.commercecloud.com;object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests

Varnish

Caching

1 evidence signal

Header

varnish(?: \(Varnish/([\d.]+)\))?\;version:\1: 1.1 6f6a165c08693865e338cdda8c008806.cloudfront.net (CloudFront), 1.1 varnish

jQuery CDN

1 evidence signal

Scripthttps://code.jquery.com/jquery-3.7.1.slim.js

Amazon Web Services

PaaS

50%

1 evidence signal

HTMLimplied by Amazon CloudFront

Libraries & Utilities10

Zendesk

Documentation

95%

1 evidence signal

dnsSPF includes zendesk.com

core-js

JavaScript libraries

1 evidence signal

JS Global__core-js_shared__ → object

Loadable-Components

JavaScript libraries

1 evidence signal

JS Global__LOADABLE_LOADED_CHUNKS__ → object

PayPal

Payment processors

1 evidence signal

Header

\.paypal\.com: img-src 'self' *.commercecloud.salesforce.com *.bathandbodyworks.com *.bathandbodyworks.ca data: *.yottaa.net bat.bing.com *.google.com *.tealiumiq.com *.smaato.net *.pubmatic.com *.rubiconproject.com *.doubleclick.net *.casalemedia.com *.3lift.com *.ads.audio.thisisdax.com *.analytics.yahoo.com *.bazaarvoice.com *.brightcove.com *.brightcovecdn.com *.brsrvr.com *.cookielaw.org *.curalate.com *.dotomi.com *.googleapis.com *.gstatic.com *.mountain.com *.omtrdc.net *.onetrust.com *.openx.net *.paypalobjects.com *.pinterest.com *.zineone.com *.datadoghq.com ads.stickyadstv.com agentcore.s3.amazonaws.com aivo-assets.s3.amazonaws.com ap.lijit.com assets-qelplatam.s3.amazonaws.com bathandbodyworkscc.zendesk.com bh.contextweb.com cdn.cookielaw.org cdn.jsdelivr.net cm.everesttech.net contextual.media.net crb.kargo.com cs.openwebmp.com dpm.demdex.net exchange-match.mediaplex.com https://www.googletagmanager.com/td ib.adnxs.com idsync.live.streamtheworld.com idsync.rlcdn.com match.adsrvr.org match.sharethrough.com mountain.com omtrdc.net partners.tremorhub.com pinterest.com ps.eyeota.net sync.1rx.io sync.bfmio.com sync.ipredictive.com sync.mathtag.com sync.targeting.unrulymedia.com tags.bluekai.com us.ck-ie.com v2assets.zopim.io https://sync.inmobi.com https://sync.crwdcntrl.net https://f.monetate.net https://csync.loopme.me https://www.googleadservices.com https://pixel.adsafeprotected.com https://www.facebook.com/ https://cdn.contentstack.io https://azure-na-images.contentstack.com https://azure-na-cdn.contentstack.com https://personalization-api.us-west-2.prod.tealiumapis.com *.207.net *.rlcdn.com *.smartadserver.com *.attn.tv *.attentivemobile.com *.fwmrm.net *.googletagmanager.com *.medallia.com *.kampyle.com https://pixel.tapad.com;script-src 'self' 'unsafe-inline' blob: storage.googleapis.com localhost:3000 code.jquery.com tags.tiqcdn.com *.yottaa.net *.attn.tv bbwi-us.attn.tv events.attentivemobile.com www.googletagmanager.com *.doubleclick.net *.bathandbodyworks.com *.bathandbodyworks.ca bat.bing.com sc-static.net *.agentbot.net *.attentivemobile.com *.bazaarvoice.com *.brcdn.com *.brightcove.net *.brightcovecdn.com *.byspotify.com *.cdn-apple.com *.cookielaw.org *.curalate.com *.dotomi.com *.googleapis.com *.gstatic.com *.kampyle.com *.monetate.net *.mpsnare.iesnare.com *.onetrust.com *.ordergroove.com *.paypal.com *.pepperjam.com *.pinterest.com *.privacymanager.io *.smaato.net *.tealiumiq.com *.zineone.com *.snapchat.com *.tiktok.com *.datadoghq.com 7316103.collect.igodigital.com api.tnapplications.com assets.adobedtm.com bathbodyworks-pixel.netlify.app cdn.cookielaw.org cdn.quantummetric.com cnstrc.com connect.facebook.net dev.zopim.com engine-global.monetate.net github.com https://*.px-cdn.net https://*.px-cloud.net https://*.yottaa.com https://*.yottaa.net https://s.pinimg.com https://www.google.com/recaptcha/ https://analytics.tiktok.com https://www.gstatic.com/recaptcha/ https://www.onelink-edge.com https://widget-mediator.zopim.com https://cdn.contentstack.io https://azure-na-images.contentstack.com https://azure-na-cdn.contentstack.com https://personalization-api.us-west-2.prod.tealiumapis.com objects.githubusercontent.com privacyportal-cdn.onetrust.com rdf.radial.com static.zdassets.com tst-rdf.radial.com https://dx.mountain.com https://px.mountain.com external.quantummetric.com https://www.googleadservices.com *.medallia.com https://google.com https://cognigy-bucket.s3.eu-west-3.amazonaws.com release-assets.githubusercontent.com *.radial.com *.queue-it.net https://*.queue-it.net https://static.queue-it.net *.riskified.com beacon.riskified.com 'unsafe-eval' https://runtime.commercecloud.com *.site.com;connect-src 'self' api.cquotient.com localhost:3000 dpm.demdex.net bbwi-us.attn.tv events.attentivemobile.com aa.bathandbodyworks.com *.tealiumiq.com *.bathandbodyworks.com *.bathandbodyworks.ca *.restapi.ordergroove.com *.bazaarvoice.com *.googleapis.com *.gstatic.com *.cookielaw.org *.zineone.com *.onetrust.com *.aivo.co *.boltdns.net *.brightcove.com *.brightcovecdn.com *.cognigy.ai *.curalate.com *.mountain.com *.omtrdc.net *.ordergroove.com *.paypal.com *.pinterest.com *.salesforce.com *.zdassets.com *.snapchat.com *.doubleclick.net *.datadoghq.com *.tiktok.com browser-intake-datadoghq.com browser-http-intake.logs.datadoghq.com rum-http-intake.logs.datadoghq.com api.tnapplications.com https://auth-dev.bathandbodyworks.com https://auth-qa.bathandbodyworks.com https://auth.bathandbodyworks.com https://auth-perf.bathandbodyworks.com https://personalization-api.us-west-2.prod.tealiumapis.com bathandbodyworkscc.zendesk.com cdn.cookielaw.org connect.facebook.net crcldu.com endpoint-foundever.cognigy.cloud engine-global.monetate.net engine.monetate.net geo.privacymanager.io geolocation.onetrust.com https://*.px-cdn.net https://*.px-cloud.net https://*.yottaa.net https://www.google.com https://www.google.com/ccm https://www.google.com/ccm/collect https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://www.onelink-edge.com https://auth.pingone.com https://www.facebook.com https://cdn.contentstack.io https://azure-na-images.contentstack.com https://azure-na-cdn.contentstack.com ingest.quantummetric.com mountain.com objects.githubusercontent.com omtrdc.net pinterest.com rdf.radial.com rl.quantummetric.com telemetry.partners.prod.minionplatform.com public.prod.minionplatform.com tst-rdf.radial.com wss://csb.zineone.com wss://endpoint-foundever.cognigy.cloud wss://widget-mediator.zopim.com zendesk-eu.my.sentry.io *.cnstrc.com/ https://pixels.spotify.com wss://cloud.zineone.com https://google.com https://restapi.ordergroove.com https://www.googleadservices.com https://api.rlcdn.com bbw.quantummetric.com https://id.zopim.com/authenticated/web/jwt *.radial.com *.attn.tv *.attentivemobile.com *.queue-it.net https://*.queue-it.net https://static.queue-it.net *.medallia.com *.kampyle.com *.riskified.com beacon.riskified.com https://runtime.commercecloud.com *.salesforce-scrt.com;frame-src https://applepay.cdn-apple.com/ *.aivo.co *.cookielaw.org *.curalate.com *.googleapis.com *.gstatic.com *.onetrust.com *.ordergroove.com *.paypal.com *.pcipal.cloud *.pcipalstaging.cloud *.pinterest.com *.zineone.com *.snapchat.com *.doubleclick.net bathandbody.demdex.net https://recaptcha.google.com/recaptcha/ https://td.doubleclick.net https://analytics.tiktok.com https://www.google.com/recaptcha/ https://www.googletagmanager.com https://www.googleadservices.com https://cdn.contentstack.io https://azure-na-images.contentstack.com https://azure-na-cdn.contentstack.com https://personalization-api.us-west-2.prod.tealiumapis.com ingest.quantummetric.com jqtmdiy716.execute-api.us-east-1.amazonaws.com telemetry.partners.prod.minionplatform.com public.prod.minionplatform.com wss://csb.zineone.com wss://endpoint-foundever.cognigy.cloud http://t.pepperjamnetwork.com cdn.quantummetric.com bbw.quantummetric.com *.radial.com *.auruspay.com/ *.aurusepay.com/ *.attentivemobile.com *.attn.tv *.medallia.com *.kampyle.com *.site.com;media-src *.boltdns.net *.brightcovecdn.com *.curalate.com agentcore.s3.amazonaws.com blob: data: static.zdassets.com *.attentivemobile.com *.attn.tv *.medallia.com *.kampyle.com;default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self' https://runtime.commercecloud.com;object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests

VideoJSv8.23.7

Video players

1 evidence signal

JS Globalvideojs → function(v8.23.7)

Brightcove

Video players

1 evidence signal

Scripthttps://players.brightcove.net/6311996242001/default_default/index.min.js

Google Maps

Maps

1 evidence signal

Script

https://maps.googleapis.com/maps/api/js?key=AIzaSyBl_gA4R2RUJFJ4Z4DmEtBQoHNmmtirUgY&solution_channel=GMP_visgl_rgmlibrary_v1_default&loading=async&callback=__googleMapsCallback__

Ecovium

Shipping carriers

1 evidence signal

Textmhp

Ordergroove

Payment processors