news media journalism

real estate property

documentation technical

healthcare medical

government public service

English

pctrk

CookieConsentPolicy

renderCtx

LSKey-c$CookieConsentPolicy

BrowserId

Domain 'sallybeautyholdings.my.site.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'sallybeautyholdings.my'. The registrable portion 'site' spans 4 characters with 2 vowels and 2 consonants. Segmentation suggests one word: site. No strong language cues emerged from the frequency lists.

upgrade-insecure-requests
frame-ancestors 'self'; report-uri /_/commcsp?disposition=enforce

style-src *.force.com https://analytics.google.com 'unsafe-inline' 'self' https://stats.g.doubleclick.net https://fonts.googleapis.com/css2 https://checkoutshopper-test.adyen.com/ blob: https://www.sallybeauty.ca https://fonts.googleapis.com/css https://fonts.gstatic.com https://www.cosmoprofbeauty.com https://checkoutshopper-live.adyen.com/ https://www.googletagmanager.com https://us.engage.app https://www.google-analytics.com https://ssl.gstatic.com *.salesforce.com https://www.sallybeauty.com *.visualforce.com:* https://service.force.com/embeddedservice/ https://www.cosmoprofbeauty.ca https://fonts.googleapis.com; report-to sfdc-csp-ep; report-uri https://sallybeautyholdings.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D1N000001Bpm1&networkId=0DMaZ0000000IjK&type=communities

application/x-www-form-urlencoded; charset=UTF-8

upgrade-insecure-requests, frame-ancestors 'self'

default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';

612ba868a7ec8a3f94303dafef74f19ed2170ff9f4184a555f7fba3f738ff008

fbe44c3d20aa9719428edda90c06906fd241f26847ae0d043e10c748dcdfd516

a55d385debbc3bfd3266076e8348e9c6bc45d058e33181726b3420e90da33175

58c81e10f9f83092df56c74957b31ff7ffd55e0bff9e5416c602fdfe468fe14e

ca7ae8865ab97c8bd834f3d41be09f45bf070776151f5e1fc2e1e50ef7bbb3aa

b7f9a7935b57b1d9fa718d740e34beb44ecb2a7dc0e41c32fa4666506fecdc87

32f95d276c5d2042156b31bab46681fee4d896bcd77466309ce1132fdb927ef9

165d0d9ea0e39ae8185850396a6cb7149dbb2bfdc91a8b0022edbe5c8d101657

fdb0a9f62dec151a2d2ee4e675ee8dfc0faa53a71ed213883c76e3f7090c283a

0512633f628eefa606c91d2c6949747e3d60392fe316768856b21a5ff7e1e873

84b02f6979c7299dab13910b753f36daee2d412201cebeebff14a9e5f326a3ce

93a40174981d44cb357cca4585deab2db5c651034f4ae018dce567f354860585

3c5020f0af9698b4cf7d14450398c1eaaca41ab3ef21d8097327c65acc6909a3

fce488410953ee51ff7f792e0b80a476e0807b735a0c3ed18009a3c20847495d

cf133d1257301cb73eaebe7f5314039add04d0ad99e0bfedcdb9114fa25a9ddc

625cd51641dcaa91bb42737d5388797ffbd2eb668dc1363d25b99c757b2217a9

6fc17a3680f40aac1898ca7b76bfac150b48bef05802ac29a20392bfb79be755

81d14fadacdbd71c7d3861383b84637bfc90b3cca25bc24e3f12e0d9b2a1d66c

default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://service.force.com/embeddedservice/ https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/ https://cdn.content.aws-prod1-useast1.aws.sfdc.cl/ https://payments.salesforce.com/ https://js.stripe.com/ https://www.paypal.com/sdk/js https://checkoutshopper-live.adyen.com/ https://checkoutshopper-test.adyen.com/ https://pal-test.adyen.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://pay.google.com import: blob: https://uip.canary.lwc.dev https://www.googletagmanager.com https://www.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.google.com https://ssl.gstatic.com https://stats.g.doubleclick.net https://www.googletagmanager.com/gtag/js https://analytics.google.com/g/collect https://analytics.google.com; object-src 'self' www.google.com; style-src 'self' 'unsafe-inline' https://service.force.com/embeddedservice/ https://fonts.googleapis.com/css2 https://fonts.googleapis.com/css https://checkoutshopper-live.adyen.com/ https://checkoutshopper-test.adyen.com/ blob: https://www.cosmoprofbeauty.com https://www.sallybeauty.com https://www.cosmoprofbeauty.ca https://www.sallybeauty.ca https://www.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com https://ssl.gstatic.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://analytics.google.com https://us.engage.app; img-src 'self' data: blob: https://sallybeautyholdings.my.salesforce.com https://sallybeautyholdings.file.force.com https://img.youtube.com https://i.ytimg.com https://i.vimeocdn.com https://login.salesforce.com/icons/ https://payments.salesforce.com/icons/ https://cdn.content.aws-prod1-useast1.aws.sfdc.cl/icons/ https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/icons/ https://*.adyen.com https://www.sandbox.paypal.com https://www.paypal.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com https://usa830.sfdc-8tgtt5.salesforce.com/icons/ https://www.cosmoprofbeauty.com https://www.sallybeauty.com https://www.cosmoprofbeauty.ca https://www.sallybeauty.ca https://www.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com https://ssl.gstatic.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://analytics.google.com https://us.engage.app; media-src 'self' blob: https://www.cosmoprofbeauty.com https://www.sallybeauty.com https://www.cosmoprofbeauty.ca https://www.sallybeauty.ca https://www.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com https://ssl.gstatic.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://analytics.google.com https://us.engage.app wss://*.livekit.cloud https://*.livekit.cloud; frame-src 'self' https://service.force.com/embeddedservice/ https://usa830.sfdc-8tgtt5.salesforce.com https://sfdc-link-preview-staging.sfdc.sh https://sfdc-link-preview.hk.salesforce.com https://cdn.embedly.com https://www.youtube.com https://player.vimeo.com https://play.vidyard.com https://player.cloudinary.com https://fast.wistia.net https://players.brightcove.net https://s1.adis.ws https://scormanywhere.secure.force.com https://appiniummastertrial.secure.force.com https://js.stripe.com/ https://www.paypal.com https://www.sandbox.paypal.com https://checkoutshopper-live.adyen.com/ https://checkoutshopper-test.adyen.com/ https://pal-test.adyen.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://pay.google.com https://*.a.forceusercontent.com/lightningmaps/ https://*.a.forceusercontent.com https://location.force.com https://sallybeautyholdings.file.force.com https://www.cosmoprofbeauty.com https://www.sallybeauty.com https://www.cosmoprofbeauty.ca https://www.sallybeauty.ca https://www.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com https://ssl.gstatic.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://analytics.google.com https://us.engage.app https://*.engage.app https://demo.arcade.software https://app.arcade.software; font-src 'self' data: https://fonts.gstatic.com/ https://www.cosmoprofbeauty.com https://www.sallybeauty.com https://www.cosmoprofbeauty.ca https://www.sallybeauty.ca https://www.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com https://ssl.gstatic.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://analytics.google.com https://us.engage.app; connect-src 'self' https://www.paypal.com https://www.sandbox.paypal.com https://sallybeautyholdings.my.salesforce-scrt.com https://fonts.googleapis.com/css2 https://payments.salesforce.com/ https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/ https://checkoutshopper-live.adyen.com/ https://checkoutshopper-test.adyen.com/ https://js.stripe.com/ https://www.google.com/recaptcha/ https://*.api.salesforce.com https://o11y.sfproxy-core1.sfdc-8tgtt5.svc.sfdcfc.net/ui-telemetry https://sentry.io https://www.cosmoprofbeauty.com https://www.sallybeauty.com https://www.cosmoprofbeauty.ca https://www.sallybeauty.ca https://www.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com https://ssl.gstatic.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://analytics.google.com https://us.engage.app wss://*.livekit.cloud https://*.livekit.cloud https://demo.arcade.software https://app.arcade.software

initial-scale=1.0, maximum-scale=5.0, minimum-scale=1.0, minimal-ui

viewport

AhF0CFIKisg+QZcMOO1kPVkD9iTw2dNL70IIkolxErMm0SFOkAwM8DqJk/f3op6Tt2uphjYo6y6Au/x61Tjg/wIAAABZeyJvcmlnaW4iOiJodHRwczovL3NpdGUuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

MarkMonitor Inc.

SITE.COM

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET

(function _ls() {
		function errLoadAuraFwScript(){
        var u=new URL(location.href);
        u.searchParams.get("aura.lcdn")==="0"||(u.searchParams.set("aura.lcdn",0),location.assign(u.search));
    }
			function script(url,co,onerror){
				var s=document.createElement("script"),a;
				s.fetchPriority="high";
				co&&(s.crossOrigin="anonymous");
				s.async=!0;
				s.src=url;
				s.addEventListener("error",onerror);
				(a=document.getElementsByTagName("script")[0])?a.parentNode.insertBefore(s,a):(document.head||document.body||document.documentElement).appendChild(s)
			}
		
	})();


        (function() {
            
            document.documentElement.classList.add('slds-no-wcag');
        }());
    


        // keep this variable here, because users do window.picassoSPA in order to check if in PSSC.
        var picassoSPA = {};
        var comm__attrVariationKey = "11FxOYiYfpMxmANj4kGJzg";
    

;(function(){window.Aura=window.Aura||{};window.Aura.beforeFrameworkInit=Aura.beforeFrameworkInit||[];var init=function init(){/*
 * This code is for Internal Salesforce use only, and subject to change without notice.
 * Customers shouldn't reference this file in any web pages.
 */
var ContentAssetGlobalValueProvider=function(a,b){this.orgId=a;this.contentDomainUrl=b};ContentAssetGlobalValueProvider.prototype.merge=function(){};ContentAssetGlobalValueProvider.prototype.isStorable=function(){return!1};ContentAssetGlobalValueProvider.prototype.get=function(a){var b="";if(!a||0===a.length)return null;b=a+"?oid\x3d"+this.orgId+"\x26";a="/file-asset/"+b;var b=$A.get("$SfdcSite.pathPrefix"),c=$A.get("$Absolute.url");return b?[c||b||"",a].join(""):[this.contentDomainUrl||"",a].join("")};

//# sourceMappingURL=/javascript/1543290307000/ui-sfdc-javascript-impl/source/ContentAssetGVP.js.map

$A.addValueProvider('$ContentAsset', new ContentAssetGlobalValueProvider('00D1N000001Bpm1',''))
};window.Aura.frameworkJsReady?init():window.Aura.beforeFrameworkInit.push(init);init=function init(){/*
 * This code is for Internal Salesforce use only, and subject to change without notice.
 * Customers shouldn't reference this file in any web pages.
 */
var RecordGlobalValueProvider=function(a,b,c,d,e){this._cmp=null;this.configs={refresh:1E3*a,expiration:1E3*b,maxSize:c,version:d,previousVersion:e,minSaveToStorageInterval:3E3,expirationMobile:2628E6};Object.freeze(this.configs)};RecordGlobalValueProvider.prototype.getValues=function(){return{}};RecordGlobalValueProvider.prototype.merge=function(a){$A.util.isEmpty(a)||(this._createCmp(),this._cmp.helper.recordLib.records._receiveFrom$RecordGvp(a))};
RecordGlobalValueProvider.prototype.get=function(a,b){if("configs"===a)return this.configs;this._requestFromServer(a)};RecordGlobalValueProvider.prototype._requestFromServer=function(a){if(this._createCmp()){var b=this._cmp.get("c.getRecord");b.setParams({recordDescriptor:a});b.setCallback(this,$A.getCallback(function(b){"INCOMPLETE"===b.getState()&&this._cmp.helper.handleIncomplete.call(this._cmp.helper,a)}));$A.enqueueAction(b);$A.run(function(){},"RecordGlobalValueProvider._requestFromServer")}};
RecordGlobalValueProvider.prototype._createCmp=function(){this._cmp||(this._cmp=$A.createComponentFromConfig({descriptor:"markup://force:recordGlobalValueProvider",attributes:null}));return!$A.util.isUndefinedOrNull(this._cmp)};

//# sourceMappingURL=/javascript/1672207910000/ui-sfdc-javascript-impl/source/RecordGVP.js.map

$A.addValueProvider('$Record', new RecordGlobalValueProvider(30, 1800, 5120, '67.0', '66.0'))};window.Aura.frameworkJsReady?init():window.Aura.beforeFrameworkInit.push(init);}());


    window.addEventListener("load",function onload(){
        if(!window.Aura["frameworkJsReady"]){}
    })
    

Requests	IP Address	Location	AS Autonomous System
12	104.21.22.26Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	172.67.202.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
23	2	-	-

Security Scan Report: sallybeautyholdings.my.site.com

Summary

AI Security Verdict

Not Assessed

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History