Sallyexpress.com

Content-Type: text/html; charset=UTF-8
Location: https://www.sallyexpress.com/
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Thu, 02 Dec 2021 03:51:01 GMT
Content-Length: 152

HTTP/2 301 
date: Thu, 02 Dec 2021 03:51:03 GMT
content-length: 0
accept-ranges: bytes
x-dwsid-samesite: None
location: https://www.sallybeauty.co.uk/
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Thu, 01 Dec 1994 16:00:00 GMT
set-cookie: dwsid=IHLk7kRX9VESOwV2vYgdH_bLHTNQRAuadc1A5W1o4PaMO9nObDpKOlrZKWCz9ihqWCW0Qs5sucEUn09al2NflQ==; path=/; HttpOnly; Secure; SameSite=None
cf-cache-status: DYNAMIC
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
strict-transport-security: max-age=2592000; includeSubDomains; preload
server: cloudflare
cf-ray: 6b7198332d8e299e-ORD

HTTP/2 200 
date: Thu, 02 Dec 2021 03:51:04 GMT
content-type: text/html;charset=UTF-8
set-cookie: dwac_b3bcb12c80b0372c5fa96f1a58=QqThRJr42rr5X_IGrNxzkLkwTwkWp-wo2eo%3D|dw-only|||GBP|false|Europe%2FLondon|true; Path=/; Secure; SameSite=None
set-cookie: cqcid=abfR3D6zOjj7LVJlDfXiFrod9v; Path=/; Secure; SameSite=None
set-cookie: cquid=||; Path=/; Secure; SameSite=None
set-cookie: sid=QqThRJr42rr5X_IGrNxzkLkwTwkWp-wo2eo; Path=/; Secure; SameSite=None
set-cookie: dwanonymous_63a37f74b0b171dcfc8aa8d456ae94c2=abfR3D6zOjj7LVJlDfXiFrod9v; Version=1; Comment="Demandware anonymous cookie for site Sites-sally-beauty-Site"; Max-Age=15552000; Expires=Tue, 31-May-2022 03:51:03 GMT; Path=/; Secure; SameSite=None
set-cookie: _pxhd=i0HEcPnqLqGAuIaS6CF8lNuYmLoVBUnzQtv/NGNMxmBwSaSGIb-RgeDYp1rVUVldert7emNUf8CNRynUOq2hAA==:8S/UfUqP9N/nEw7rK1oZY0amPEaNTR5Rtq/7i5cmqmmisufe9DdE8B45eQa-1uyaADzDNDuVqaalcHZx-y-QLRVgWSzxWGvM-PZgQA0IQQ8=; Expires=Fri, 02-Dec-2022 09:40:15 GMT; Path=/; Secure; SameSite=None
access-control-allow-origin: www.sallybeauty.co.uk
x-content-type-options: nosniff
x-dw-request-base-id: VO76FUcVqGEBAAB_
x-frame-options: DENY
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self' www.google.com *.worldpay.com *.criteo.com *.qualaroo.com www.youtube.com *.issuu.com www.instagram.com *.addthis.com *.facebook.com *.twitter.com;  script-src 'self' *.cquotient.com *.cloudflare.com unpkg.com *.zdassets.com *.bing.com www.google-analytics.com/analytics.js www.google-analytics.com/plugins/ua/ecommerce.js www.google-analytics.com/plugins/ua/ec.js maps.googleapis.com *.mondialrelay.com *.feefo.com *.worldpay.com *.px-cloud.net *.scarabresearch.com www.google.com www.gstatic.com *.criteo.net *.criteo.com *.crazyegg.com *.amazonaws.com *.facebook.net *.trustedshops.com *.qualaroo.com *.webgains.com *.webgains.io polyfill.io www.instagram.com *.salon-services.com *.addthis.com *.addthisedge.com *.moatads.com *.twitter.com *.webgains.com *.webgains.io *.emarsys.net *.sallyexpress.com *.onetrust.com 'unsafe-inline' 'unsafe-eval' blob:;  img-src 'self' *.salesforce.com www.paypalobjects.com *.demandware.net *.bing.com www.google.com www.google.com.ua www.google-analytics.com maps.gstatic.com maps.googleapis.com *.salon-services.com *.feefo.com *.cloudfront.net *.trustedshops.com *.mondialrelay.com *.tapad.com *.criteo.com *.smaato.net *.yieldmo.com *.rubiconproject.com *.advertising.com *.mgid.com *.liadm.com *.yahoo.com *.openx.net *.addthis.com *.doubleclick.net *.outbrain.com *.yieldlab.net *.bidswitch.net *.smartadserver.com *.3lift.com *.taboola.com *.360yield.com *.teads.tv *.pubmatic.com *.casalemedia.com *.mgid.com *.media.net *.omnitagjs.com *.adform.net *.twiago.com *.adnxs.com *.adscale.de *.socdm.com *.sharethrough.com *.stickyadstv.com *.rlcdn.com *.ivitrack.com *.e-planning.net *.smartclip.net *.ad-stir.com *.clmbtech.com *.tremorhub.com *.demdex.net *.postrelease.com *.facebook.com *.google.com *.openstreetmap.org *.aralego.com *.bluekai.com *.adsrvr.org *.ants.vn *.krxd.net *.mediavine.com *.microad.jp *.agkn.com *.emarsys.net *.crazyegg.com *.bluekai.com data:;  font-src 'self' *.googleapis.com *.gstatic.com data:;  style-src 'self' 'unsafe-inline' *.googleapis.com unpkg.com *.mondialrelay.com *.worldpay.com;  connect-src 'self' *.zendesk.com *.crazyegg.com *.zdassets.com *.google-analytics.com *.feefo.com *.doubleclick.net *.crazyegg.com *.mondialrelay.com *.scarabresearch.com *.emarsys.net *.px-cdn.net *.px-cloud.net *.edq.com *.bing.com *.webgains.com *.webgains.io *.onetrust.com;  media-src 'self'
x-sf-cc-strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
set-cookie: __cq_dnt=0; Path=/; Secure; SameSite=None
set-cookie: dw_dnt=0; Path=/; Secure; SameSite=None
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Thu, 01 Dec 1994 16:00:00 GMT
set-cookie: dwsid=_g7xnctODAAjoazQ0huL6QWaX9BHETqSAxQ3gs_ZJ6IhIOCfn2sI2Mz6T8xb46Yw6GT_aAFs9f7uiMBdZDIddw==; path=/; HttpOnly; Secure; SameSite=None
vary: accept-encoding
cf-cache-status: DYNAMIC
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
strict-transport-security: max-age=2592000; includeSubDomains; preload
server: cloudflare
cf-ray: 6b7198378e3103cc-ORD
content-encoding: gzip