English

OptanonConsent

returningUser

globalId

aws-waf-token

Domain 'thesaleroom.com' uses the commercial generic top-level domain (.com) and has no subdomain. Its registrable label 'thesaleroom' stretches across 11 characters with five vowels and 6 consonants. It segments into 3 words: the, sale, room. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

html/c4/eb/c4eb2a07-3acc-46cb-8a13-c97538bb6ad2.html.gz

appId=cid-v1:e1aee288-815e-4c0d-af57-1f4ce5faed92

No content

e57f8e3a19d89cc9dc02e8e02bb5a1e77de5d0a77d04fc9c80844a7983a5882c

e0d2e872be145886fa21dbfb0bdd82a6dd87de09470f3b4dc8a93c9548f1d365

6e00d19178e39fab94cf33a11435b7bd092cdf5fb32da7a3be43b9e916e71834

1b30d1d69fd73b5135d553b234fa2c04f7163a7c1251981f6b9cf4bf1a39c640

590d290c54508fe80c4b3c8e3ac630263406c46432a4e0d973f365b3011b36ef

734a205b5e6e41a72cdc9ac1b6c9e5a402d8ea7a19bf2e691819c67818d93b78

1dbe3b1d2e19df76674a125f1f2699fa572848253bf2c80545a43ffef5b0ada6

3d0192ada7ae64a7e12d1128dd88f7eaafefe30f8f34cad5a6ff9687f3c7d652

width=device-width, initial-scale=1, maximum-scale=1.0, user-scalable=no, minimal-ui

viewport

author

https://www.the-saleroom.com/Content/SR/images/site-logo.png

Bid online for collectables and antiques at the Web&#32s No.1 online auction site.   Over 100,000 live lots each day!

description

antiques, auction, online auctions, auction house, collectables, auctioneers, live auctions, buy to auction, bidding site, auction software

keyword

msapplication-TileColor

/content/sr/images/icons/ms-icon-144x144.png

msapplication-TileImage

theme-color

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

GoDaddy.com, LLC

THE-SALEROOM.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon Data Services Northern Virginia

Amazon EC2 Network Operations

AMAZON-S3

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

AMAZO-ZL4


                function OptanonWrapper() { }
            

 window.dataLayer = window.dataLayer || []; 
window.dataLayer.push({
"loggedIn" : "False",
"pageType" : "Homepage",
"modelName" : "HomePage",
"platformCode" : "SR",
"referrer" : "",
"reskinAuctionRegFlow" : "True",
"reskinHomepage" : "True",
"reskinSearchResults" : "True",
"reskinAuctionCalendar" : "True",
"reskinAuctionCatalogue" : "True",
"reskinCurrentLotsTimed" : "False",
"reskinCurrentLotsLiveCompetitive" : "False",
"reskinCurrentLotsLiveAutoBid" : "False",
"reskinCurrentLotsCatalogue" : "False",
"reskinCurrentLotsTender" : "False",
"reskinExpiredLots" : "False",
"reskinAuctioneerDirectory" : "False",
"reskinPriceGuide" : "False",
"reskinHeaderFooter" : "False",
"enhancedSearch" : "True",
});

           
          processValues([['globalId','uid'],
                         ['lastActivity','timeout'],
                         ['sessionNumber','session'],                  
                         ['pageNumber','counter'],
                         ['sessionId','sessionid'],
                         ['userId','mirror'],
                         ['userStatus','userStatus'],
                         ['auctionAlerts','mirror'],
                         ['watchedItems','mirror']]);
         // check if we have event to fire
         //
         // export processValue for other scripts to add values to ls and datalayer
        window.processValue = processValue;

            




    // Google Analytics
    window.GA_TRACKING = {
        DISABLE_PREFIX: 'ga-disable-',
        COOKIE_GROUPS: {
            PERFORMANCE: 'C0002',
            FUNCTIONAL: 'C0003',
            TARGETING: 'C0004'
        }
    };



    window.COOKIE_CONFIG = window.COOKIE_CONFIG || {};
    window.COOKIE_CONFIG.BLOCKED_COOKIES = {
        FUNCTIONAL: ["gap-lot","AmplitudeVisitorCode","esOptOut","i-bidder-search-option"," __zlcid"," VISITOR_INFO1_LIVE"," __zlcstore"," clerk-log-email"," __zlcmid"," rxVisitor"," _zdshared_user_session_analytics"," firedEventIds"],
        PERFORMANCE: ["_ga","_ga*","_gcl*","_gat","_gid","dtCookie","ai_session","ai_user","rxvt","_hjTLDTest"," _dd_s"," _hjSession_3763826"," _hjSessionUser_1090032"," ubpv"," _hjIncludedInSessionSample"," _hjSession_1090032"," _hjFirstSeen"," dtSa"," _hjAbsoluteSessionInProgress"," ubvs"," hpbanner"," ubvt"," dtPC"," catbanner"," _hjSessionUser_3763826"," zte2095"," _hjIncludedInSessionSample_3763826","AmplitudeDeviceId","AmplitudeSessionId","AmplitudeUserId","AmplitudeAuthStatus","AmplitudeCurrentUserId","AMP_*"],
        TARGETING: ["_fbp","OAGEO","OAID","test_cookie","awxxxx","aw*","personalisationGroupsNumberOfVisitsSessionStarted"," personalisationGroupsNumberOfVisits"," TESTCOOKIESENABLED"," survey_started"," __Secure-BUCKET"," deviceType"," VISITOR_PRIVACY_METADATA"," __Secure-ROLLOUT_TOKEN"," NID"," IDE"," YSC"],
        OTHERS: ["__cf_bm","_cfuvid","fm-websync-"]
    };



    const CookieGroups = {
        FUNCTIONAL: 'FUNCTIONAL',
    PERFORMANCE: 'PERFORMANCE',
    TARGETING: 'TARGETING',
    OTHERS: 'OTHERS'
};



    // Disable GA if there's no prior consent or if C0002 is not active
    if (document.cookie.indexOf('OptanonConsent') === -1 ||
        document.cookie.indexOf(GA_TRACKING.COOKIE_GROUPS.PERFORMANCE+':1') === -1 ||
        !false) {
        window[GA_TRACKING.DISABLE_PREFIX +'-UA-1419588-1'] = true;
    }



        if (localStorage.getItem('disableCookieMonitoring') === 'true') {
            window.startCookieMonitoring = function() { 
            };
            window.OnConsentChanged = function() {
            };
        } else {
            function createCookieInterceptors() {
                // Early return if feature is disabled
                if (!true) {
                    return;
                }
                
                // Cache the blocked cookie patterns for faster lookup
                const blockedPatterns = {
                    PERFORMANCE: COOKIE_CONFIG.BLOCKED_COOKIES.PERFORMANCE.map(p => p.replace('*', '')),
                    FUNCTIONAL: COOKIE_CONFIG.BLOCKED_COOKIES.FUNCTIONAL.map(p => p.replace('*', '')),
                    TARGETING: COOKIE_CONFIG.BLOCKED_COOKIES.TARGETING.map(p => p.replace('*', '')),
                    OTHERS: COOKIE_CONFIG.BLOCKED_COOKIES.OTHERS.map(p => p.replace('*', ''))
                };

                // Single function to check if cookie is blocked
                const isCookieBlocked = (cookieName, group) => {
                    // OTHERS uses TARGETING consent group
                    const consentGroup = group === 'OTHERS' ? 'TARGETING' : group;
                    if (!OnetrustActiveGroups?.includes(GA_TRACKING.COOKIE_GROUPS[consentGroup])) {
                        return blockedPatterns[group].some(pattern => cookieName.startsWith(pattern));
                    }
                    return false;
                };

                // Intercept GA reinitialization attempts
                let _ga = window.ga;
                Object.defineProperty(window, 'ga', {
                    configurable: true,
                    enumerable: true,
                    get: () => _ga,
                    set: (value) => {
                        if (typeof OnetrustActiveGroups === 'undefined' || 
                            !OnetrustActiveGroups?.includes(GA_TRACKING.COOKIE_GROUPS.PERFORMANCE)) {
                            return;
                        }
                        _ga = value;
                    }
                });

                // Intercept cookie creation
                const originalDocumentCookie = Object.getOwnPropertyDescriptor(Document.prototype, 'cookie');
                Object.defineProperty(document, 'cookie', {
                    configurable: true,
                    enumerable: true,
                    get: function() {
                        return originalDocumentCookie.get.call(this);
                    },
                    set: function(value) {
                        if (typeof OnetrustActiveGroups === 'undefined') {
                            return;
                        }

                        const cookieName = value.split('=')[0].trim();

                        // Check all cookie types in one pass, including OTHERS
                        if (isCookieBlocked(cookieName, 'PERFORMANCE') ||
                            isCookieBlocked(cookieName, 'FUNCTIONAL') ||
                            isCookieBlocked(cookieName, 'TARGETING') ||
                            isCookieBlocked(cookieName, 'OTHERS')) {
                            return;
                        }

                        originalDocumentCookie.set.call(this, value);
                    }
                });
            }

            // Function to delete a specific cookie
            function deleteCookie(name, path = '/', domain = window.location.hostname) {
                var domainNameParts = window.location.hostname.split('.');
                var domainName = domainNameParts.slice(1).join('.');
                var domains = [window.location.hostname, '.' + domainName, domainName, ''];

                if (name.endsWith('*')) {
                    var prefix = name.slice(0, -1);
                    document.cookie.split(';').forEach(function(cookie) {
                        var cookieName = cookie.trim().split('=')[0];
                        if (cookieName.startsWith(prefix)) {
                            domains.forEach(function(domain) {
                                document.cookie = cookieName + '=;expires=Thu, 01 Jan 1970 00:00:01 GMT;path=' + path + ';domain=' + domain + ';';
                                document.cookie = cookieName + '=;expires=Thu, 01 Jan 1970 00:00:01 GMT;path=' + path + ';';
                            });
                        }
                    });
                } else {
                    domains.forEach(function(domain) {
                        document.cookie = name + '=;expires=Thu, 01 Jan 1970 00:00:01 GMT;path=' + path + ';domain=' + domain + ';';
                        document.cookie = name + '=;expires=Thu, 01 Jan 1970 00:00:01 GMT;path=' + path + ';';
                    });
                }
            }

            // Function to delete all GA cookies
                async function deleteGACookies() {
                COOKIE_CONFIG.BLOCKED_COOKIES.PERFORMANCE.forEach(cookieName => {
                    if (cookieName === '_ga_*') {
                        document.cookie.split(';').forEach(cookie => {
                            const name = cookie.trim().split('=')[0];
                            if (name.startsWith('_ga_')) {
                                deleteCookie(name);
                                deleteCookie(name, '/', '.' + window.location.hostname);
                            }
                        });
                    } else {
                        deleteCookie(cookieName);
                        deleteCookie(cookieName, '/', '.' + window.location.hostname);
                    }
                });

                window[GA_TRACKING.DISABLE_PREFIX +'-UA-1419588-1'] = true;

                if (window.ga) {
                    delete window.ga;
                }

                if (window.dataLayer) {
                    window.dataLayer.push({
                        'event': 'cookie_consent_update',
                        'analytics_storage': 'denied'
                    });
                }
                }

                async function cleanCookies() {
                    if (window.ApplicationInsights) {
                        delete window.ApplicationInsights;
                    }

                    if (window.dtrum) {  // Dynatrace
                        delete window.dtrum;
                    }

                    if (window.esOptOut) {  // Search OptOut
                        delete window.esOptOut;
                    }

                    if (window.dataLayer) {
                        window.dataLayer.push({
                            'event': 'cookie_consent_update',
                            'functional_storage': 'denied'
                        });
                    }
                }

            // Function to delete all Functional cookies
                async function deleteCookiesForGroup(groupKey) {
                    const blockedList = COOKIE_CONFIG.BLOCKED_COOKIES[groupKey];
                    if (!blockedList) return;

                    blockedList.forEach(cookieName => {
                        deleteCookie(cookieName);
                        deleteCookie(cookieName, '/', '.' + window.location.hostname);
                    });

                    cleanCookies();
                }



            async function checkCookiesByType(type) {
                const cookies = document.cookie.split(';');
                const blockedList = COOKIE_CONFIG.BLOCKED_COOKIES[type] || [];

                return cookies.some(cookie => {
                    const cookieName = cookie.trim().split('=')[0];

                    return blockedList.some(blocked => {
                        if (blocked.endsWith('*')) {
                            return cookieName.startsWith(blocked.replace('*', ''));
                        }
                        return cookieName === blocked;
                    });
                });
            }


            // Function to check consent state
                function checkConsentState() {
                    if (checkCookiesByType(CookieGroups.PERFORMANCE) && !OnetrustActiveGroups?.includes(GA_TRACKING.COOKIE_GROUPS.PERFORMANCE)) {
                        deleteCookiesForGroup(CookieGroups.PERFORMANCE);
                }

                    if (checkCookiesByType(CookieGroups.FUNCTIONAL) && !OnetrustActiveGroups?.includes(GA_TRACKING.COOKIE_GROUPS.FUNCTIONAL)) {
                        deleteCookiesForGroup(CookieGroups.FUNCTIONAL);
                }

                    if (checkCookiesByType(CookieGroups.TARGETING) && !OnetrustActiveGroups?.includes(GA_TRACKING.COOKIE_GROUPS.TARGETING)) {
                        deleteCookiesForGroup(CookieGroups.TARGETING);
                }

                    if (checkCookiesByType(CookieGroups.OTHERS) && !OnetrustActiveGroups?.includes(GA_TRACKING.COOKIE_GROUPS.TARGETING)) {
                        deleteCookiesForGroup(CookieGroups.OTHERS);
                }
            }

                let cookieMonitoringIntervalId;
                let cookieMonitoringAttemptCount = 0;

                // Function for continuous monitoring
                function startCookieMonitoring() {
                    createCookieInterceptors();

                    if (cookieMonitoringIntervalId) {
                        clearInterval(cookieMonitoringIntervalId);
                    }

                    const INITIAL_ATTEMPTS = 10;
                    const LONG_INTERVAL = 10000; // 10 seconds in milliseconds

                    const getCookieMonitoringInterval = (attemptCount) => {
                        if (attemptCount < INITIAL_ATTEMPTS) {
                            if (attemptCount === 0) return 100;
                            if (attemptCount === 1) return 300;
                            if (attemptCount === 2) return 500;
                            return 1000;
                        }
                        return LONG_INTERVAL;
                    };

                    function checkAndDeleteBlockedCookies() {
                        if (typeof OnetrustActiveGroups === 'undefined') {
                            return;
                        }

                        if (localStorage.getItem('disableCookieDeletion') === 'true') {
                            return;
                        }

                        // Add explicit cookie checks and deletions
                        if (checkCookiesByType(CookieGroups.PERFORMANCE) && !OnetrustActiveGroups?.includes(GA_TRACKING.COOKIE_GROUPS.PERFORMANCE)) {
                            deleteCookiesForGroup(CookieGroups.PERFORMANCE);
                        }

                        if (checkCookiesByType(CookieGroups.FUNCTIONAL) && !OnetrustActiveGroups?.includes(GA_TRACKING.COOKIE_GROUPS.FUNCTIONAL)) {
                            deleteCookiesForGroup(CookieGroups.FUNCTIONAL);
                        }

                        if (checkCookiesByType(CookieGroups.TARGETING) && !OnetrustActiveGroups?.includes(GA_TRACKING.COOKIE_GROUPS.TARGETING)) {
                            deleteCookiesForGroup(CookieGroups.TARGETING);
                        }

                        if (checkCookiesByType(CookieGroups.OTHERS) && !OnetrustActiveGroups?.includes(GA_TRACKING.COOKIE_GROUPS.TARGETING)) {
                            deleteCookiesForGroup(CookieGroups.OTHERS);
                        }

                        clearInterval(cookieMonitoringIntervalId);
                        cookieMonitoringAttemptCount++;
                        
                        const nextMonitoringInterval = getCookieMonitoringInterval(cookieMonitoringAttemptCount);
                        cookieMonitoringIntervalId = setInterval(checkAndDeleteBlockedCookies, nextMonitoringInterval);
                    }

                    cookieMonitoringIntervalId = setInterval(checkAndDeleteBlockedCookies, getCookieMonitoringInterval(cookieMonitoringAttemptCount));
                }


            window.OnConsentChanged = function () {
                checkConsentState();
                deleteCookiesByConsent();

            };

            function deleteCookiesByConsent() {
                if ('False' != 'True') {
                    deleteCookiesForGroup(CookieGroups.FUNCTIONAL);
                }

                if ('False' != 'True') {
                    deleteCookiesForGroup(CookieGroups.TARGETING);
                }

                if ('False' != 'True') {
                    deleteCookiesForGroup(CookieGroups.PERFORMANCE);
                }

                startCookieMonitoring();
            }

            // Immediate protection when script loads
            (function () {
                createCookieInterceptors();  // First line of defense
                deleteCookiesByConsent();
            })();
        }
    


    // https://docs.openreplay.com/en/sdk/constructor/#initialization-options
    var initOpts = {
        projectKey: "tOrtOLsSWOhMRhmLNZI2",
        ingestPoint: "https://openreplay.auctiontechnologygroup.com/ingest",
        capturePerformance: false,
        defaultInputMode: 0,
        disableStringDict: true,
        domSanitizer: function (node) {
            const isPassword = node.getAttribute('password') === 'password';

            if (isPassword) {
                return 1; // obscured
            }

            return 0; // plain
        },
        network: {
            failuresOnly: false,
            sessionTokenHeader: false,
            ignoreHeaders: false,
            capturePayload: true,
            sanitizer: function (data) {
                return data;
            },
            captureInIframes: false
        }
    };

    var startOpts = {
     userID: "",
     metadata: {
         name: "",
         email: "",
         ip: "10.10.29.202",
         userAgent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36",
         buildNumer: "3.1.0.1035.29f6655"
         }
     };

    // boilerplate script tag
    (function (A, s, a, y, e, r) {
        r = window.OpenReplay = [e, r, y, [s - 1, e]];
        s = document.createElement('script'); s.src = A; s.async = !a;
        document.getElementsByTagName('head')[0].appendChild(s);
        r.start = function (v) { r.push([0]) };
        r.stop = function (v) { r.push([1]) };
        r.setUserID = function (id) { r.push([2, id]) };
        r.setUserAnonymousID = function (id) { r.push([3, id]) };
        r.setMetadata = function (k, v) { r.push([4, k, v]) };
        r.event = function (k, p, i) { r.push([5, k, p, i]) };
        r.issue = function (k, p) { r.push([6, k, p]) };
        r.isActive = function () { return false };
        r.getSessionToken = function () { };
    })("//static.openreplay.com/11.0.1/openreplay.js", 1, 0, initOpts, startOpts);
    


    Gap.Portal.UI.SiteLoginProperties = {
        anErrorOccured: 'Sorry, an error occurred.',
        returnURL: ' https://www.the-saleroom.com/en-gb',
        resendVerificationLink: '/en-gb/my-account/resendverificationemail',
        registerLink: '/en-gb/my-account/register',
        portalName: 'the-saleroom.com',
        platformCode: 'SR'
    };



        var instantSearchSwitch = 'false';
    


            setEnhancedSearchSessions(true, true);

            ensureSearchInsightsIsLoaded(function () {
                runOverlay();
            });
        


    $(function () {
        window.ssoRedirect = true;
        window.ssoRedirectLoginUrl = "https://www.the-saleroom.com/en-gb/my-account/login";
    });



        <section class="section featured-auctions">
    <div class="section-container">
        <h3 class="section-heading">Featured auctions</h3>
        <ul ng-class="{'auction-column-2' : numberOfColumns == 2 , 'auction-column-3' : numberOfColumns == 3}">
            <li class="featured-auctions-item" ng-repeat="item in items">
                <article>
                    <a href="{{::item.itemLink}}">
                        <span class="featured-auctions-title" ng-if="::item.heading || item.date">
                            <div class="featured-auctions-date">{{::item.date}}</div>
                            <span class="featured-auctions-name">{{::item.heading}}</span>
                        </span>
                        <div class="featured-auctions-image">
                            <div class="featured-auctions-image-content" ng-style="{'background-image':'url({{item.mainImage | image:''}})'}"></div>
                        </div>
                    </a>
                    <div class="featured-auction-view-container">
                        <a class="featured-auction-view" href="{{::item.itemLink}}">View Items</a>
                    </div>
                </article>
            </li>
        </ul>
    </div>
</section>
    


        var featuredAuctionsConstantModule = angular.module('gap.featuredauctions.constants', []);
        featuredAuctionsConstantModule.constant('configUrl', 'https://www.the-saleroom.com/en-gb/marketplace-content/featured-auctions');
        featuredAuctionsConstantModule.constant('staticTemplate', $('script#homepageFeaturedAuctionsTemplate').html());
    


        $(document).ready(function () {
            var desktopView = window.matchMedia('(min-width: 1200px)');
            function dropdownInit(e) {
                if (e.matches) {
                    $('.ui.dropdown').dropdown();
                }
            }
            desktopView.addListener(dropdownInit);
            dropdownInit(desktopView);
        });
    

Requests	IP Address	Location	AS Autonomous System
41	13.32.121.11	New York, New York, United States	AS16509AMAZON-02
39	13.107.246.44	United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
26	3.5.69.17	Dublin, Leinster, Ireland	AS16509AMAZON-02
13	52.218.101.155	Dublin, Leinster, Ireland	AS16509AMAZON-02
12	13.107.213.44	United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
11	172.64.155.119	United States	AS13335CLOUDFLARENET
4	54.230.228.104	United States	AS16509AMAZON-02
4	216.198.53.3	United States	AS209242Cloudflare London, LLC
3	104.17.25.14	United States	AS13335CLOUDFLARENET
2	216.198.54.3	United States	AS209242Cloudflare London, LLC
140	58	-	-

Security Scan Report: thesaleroom.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History