sgtm.elfcosmetics.com isn't a typical website. It's a subdomain of the well-known cosmetics retailer elfcosmetics.com, and it returns an error when you try to load it. That means there's nothing to buy, read, or interact with. The name 'sgtm' suggests it might be a server-side tracking tag or a staging environment used internally by the company. If you're looking for elf products, stick to the main store. There's no evidence that this subdomain is a scam, but it's also not a place you should expect to work. The lack of a working page, combined with missing contact info and legal pages, all point to a technical endpoint rather than a consumer-facing site. So if you landed here accidentally, you can ignore it. If you're researching whether sgtm.elfcosmetics.com is safe, the answer is that it's not active enough to pose a risk, but it's also not useful for anything. For a real elf cosmetics experience, visit the parent domain directly.
In plain English
sgtm.elfcosmetics.com is a subdomain of the legitimate elfcosmetics.com brand, but it returns an HTTP 400 error and doesn't serve a normal webpage. It's likely a backend or tracking server, not a site you'd visit for shopping or information. No scam indicators are present, but there's also nothing to interact with.
Where the score comes from
The site uses a valid SSL certificate from a trusted issuer and passes Google's safety checks, but it still supports outdated TLS versions and lacks basic browser protections. For a backend subdomain these are minor, not dealbreakers.
This is a subdomain of elfcosmetics.com, a well-known cosmetics brand. The WHOIS record for the subdomain itself is empty, which is standard for subdomains. The parent company's identity is established, so the lack of a separate about page here is not a red flag.
No blacklist hits and no history in the Wayback Machine, which is typical for a new or internal subdomain. The parent domain has a solid reputation, lending some credibility to this subdomain by association.
No contact information, about page, or social media links are present, but that's expected for a technical subdomain that isn't intended for public interaction. The site returns an error, so there's no content to evaluate.
Missing privacy policy and terms of service, which would be a problem for a storefront. However, this subdomain doesn't appear to collect user data or sell anything, so the absence is less concerning.
Hosted on Google Cloud with a fast response time, but no email configuration, no DNSSEC, and no advanced security headers. For a non-public server, these are acceptable but not impressive.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →