Hallmark.com - Greetings.hallmark.com

server: AkamaiGHost
content-length: 0
location: https://www.hallmark.com/cards
expires: Wed, 31 Dec 2025 03:59:42 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 31 Dec 2025 03:59:42 GMT
alt-svc: h3=":443"; ma=93600
access-control-expose-headers: *
access-control-allow-credentials: false
access-control-allow-origin: *

HTTP/2 301 
content-length: 0
cf-ray: 9b66dda549b70869-BOS
accept-ranges: bytes
x-dwsid-samesite: None
location: https://www.hallmark.com/cards/
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.hallmark.com *.cybersource.com google.com *.google.com *.googleadservices.com *.googleservices.com *.googletagmanager.com *.gstatic.com *.smartystreets.com browser-intake-datadoghq.com edge.adobedc.net *.adobedtm.com *.onetrust.com *.adsrvr.org *.akamaihd.net *.amazon-adsystem.com *.bing.com *.browser-intake-datadoghq.com *.brsrvr.com *.contentsquare.net *.contentsquare.com *.cookielaw.org *.cquotient.com *.datadoghq-browser-agent.com *.demdex.net *.doubleclick.net *.dxpapi.com *.facebook.com *.facebook.net *.igodigital.com *.ipredictive.com *.kampyle.com *.medallia.com *.mppglobal.com *.my.salesforce-scrt.com *.my.site.com *.nmgassets.com *.omtrdc.net *.online-metrix.net *.paa-reporting-advertising.amazon *.paypal.com *.paypalobjects.com *.pinimg.com *.pinterest.com *.salesforceliveagent.com *.sc-static.net *.sitelabweb.com *.snapchat.com *.tiktok.com *.tiktokw.us *.videoamp.com *.wandzapi.com *.yahoo.com *.yimg.com bat.bing.net sc-static.net service.force.com static.ads-twitter.com; connect-src 'self' hmklabs-dotcom-prod-us-west-2-templates.s3.us-west-2.amazonaws.com *.hallmark.com *.cybersource.com google.com *.google.com *.googleadservices.com *.googleservices.com *.googletagmanager.com *.gstatic.com *.smartystreets.com browser-intake-datadoghq.com edge.adobedc.net *.adobedtm.com *.onetrust.com *.adsrvr.org *.akamaihd.net *.amazon-adsystem.com *.bing.com *.browser-intake-datadoghq.com *.brsrvr.com *.contentsquare.net *.contentsquare.com *.cookielaw.org *.cquotient.com *.datadoghq-browser-agent.com *.demdex.net *.doubleclick.net *.dxpapi.com *.facebook.com *.facebook.net *.igodigital.com *.ipredictive.com *.kampyle.com *.medallia.com *.mppglobal.com *.my.salesforce-scrt.com *.my.site.com *.nmgassets.com *.omtrdc.net *.online-metrix.net *.paa-reporting-advertising.amazon *.paypal.com *.paypalobjects.com *.pinimg.com *.pinterest.com *.salesforceliveagent.com *.sc-static.net *.sitelabweb.com *.snapchat.com *.tiktok.com *.tiktokw.us *.videoamp.com *.wandzapi.com *.yahoo.com *.yimg.com bat.bing.net sc-static.net service.force.com static.ads-twitter.com us-autocomplete-pro.api.smartystreets.com s3.us-west-2.amazonaws.com *.amazon-adsystem.com render-output-lambda-access-point-011746944759.s3-object-lambda.us-west-2.amazonaws.com gs.wandzcdn.com production-main-hallmark.demandware.net; frame-ancestors 'self' https://www.rioseo.com https://ideas.hallmark.com https://production-main-hallmark.demandware.net; img-src 'self' data: *; style-src * 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self'; form-action 'self' *.cybersource.com *.facebook.com; font-src * 'unsafe-inline'; manifest-src 'self'; frame-src 'self' *.hallmark.com *.cybersource.com sitelabweb.com *.my.site.com *.vimeo.com *.online-metrix.net service.force.com *.snapchat.com *.adsrvr.org *.demdex.net *.doubleclick.net *.google.com *.googletagmanager.com *.ipredictive.com *.kampyle.com *.paypal.com *.pinterest.com *.facebook.com s.amazon-adsystem.com; media-src 'self' *.hallmark.com vimeocdn.com *.vimeocdn.com vimeo.com *.vimeo.com captions.cloud.vimeo.com; child-src *.hallmark.com blob:; worker-src *.hallmark.com blob:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=nnb9bu_PBkbZOIy9Oq9X3jqajVK0agw.1i8__Bqq8v0-1767153582-1.0.1.1-Eqn.bcB1KfyyRswTU2s8Ka6Dz.H0jw.zkqJr1xtVdo2Ar6oJIOIgkIEWZ_DyPzCvf_rhvtv1__jX_6J.NwfU_rnNUvn9Bf3cOpThKwJD.YBA468lQCIK1gE4iSHP4GZG70BM1rqT2tNm2mVNJ994exGsvSmLnJH1CjJxaHksaDh3qrEgiEnoIngobGHNmGf1SO9Sjd6o0wgT4cEeg4r.Aw; report-to cf-zszbeyfqqaixjuap
report-to: {"endpoints":[{"url":"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=nnb9bu_PBkbZOIy9Oq9X3jqajVK0agw.1i8__Bqq8v0-1767153582-1.0.1.1-Eqn.bcB1KfyyRswTU2s8Ka6Dz.H0jw.zkqJr1xtVdo2Ar6oJIOIgkIEWZ_DyPzCvf_rhvtv1__jX_6J.NwfU_rnNUvn9Bf3cOpThKwJD.YBA468lQCIK1gE4iSHP4GZG70BM1rqT2tNm2mVNJ994exGsvSmLnJH1CjJxaHksaDh3qrEgiEnoIngobGHNmGf1SO9Sjd6o0wgT4cEeg4r.Aw"}],"group":"cf-zszbeyfqqaixjuap","max_age":86400}
server: cloudflare
expires: Wed, 31 Dec 2025 03:59:42 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 31 Dec 2025 03:59:42 GMT
set-cookie: dwsid=bZjuom6AVTMBPjbYoQOidW_0Cy8h8C73L92o9o658rl1e6vMhPGV1wsOOIifZuhEwnjhYb8Svze4KsOsBqCUgQ==; path=/; HttpOnly; Secure; SameSite=None
set-cookie: __cf_bm=Mk3L4JOj0fr4TLAW_rWOsArJFdoj5Hc71yOb.L65NVU-1767153582-1.0.1.1-ZXBgQiIRoDxn2bID8BI775Ol41Yq.5nzqUexBk9uoxgCkwGPiZA7q4428zndAJ4pDI3aigwGNTgefB9FDWz57k2xQKoM7gFQTvUk0KAyhPU; path=/; expires=Wed, 31-Dec-25 04:29:42 GMT; domain=.hallmark.com; HttpOnly; Secure; SameSite=None
set-cookie: _cfuvid=H.5hSuQ9EOoNU3qk7DJszZy8FSdqfddzsxyNa6o9HpI-1767153582952-0.0.1.1-604800000; path=/; domain=.hallmark.com; HttpOnly; Secure; SameSite=None
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.92a02417.1767153582.78c48f19

HTTP/2 200 
content-type: text/html;charset=UTF-8
cf-ray: 9b66dda61813639f-BOS
accept-ranges: bytes
x-dw-request-base-id: gYXqIK-fVGkBAAB_
x-sf-cc-siteid: hmk-onesite
x-frame-options: SAMEORIGIN
x-sf-cc-requestlocale: default
x-xss-protection: 0
x-content-type-options: nosniff
vary: accept-encoding
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.hallmark.com *.cybersource.com google.com *.google.com *.googleadservices.com *.googleservices.com *.googletagmanager.com *.gstatic.com *.smartystreets.com browser-intake-datadoghq.com edge.adobedc.net *.adobedtm.com *.onetrust.com *.adsrvr.org *.akamaihd.net *.amazon-adsystem.com *.bing.com *.browser-intake-datadoghq.com *.brsrvr.com *.contentsquare.net *.contentsquare.com *.cookielaw.org *.cquotient.com *.datadoghq-browser-agent.com *.demdex.net *.doubleclick.net *.dxpapi.com *.facebook.com *.facebook.net *.igodigital.com *.ipredictive.com *.kampyle.com *.medallia.com *.mppglobal.com *.my.salesforce-scrt.com *.my.site.com *.nmgassets.com *.omtrdc.net *.online-metrix.net *.paa-reporting-advertising.amazon *.paypal.com *.paypalobjects.com *.pinimg.com *.pinterest.com *.salesforceliveagent.com *.sc-static.net *.sitelabweb.com *.snapchat.com *.tiktok.com *.tiktokw.us *.videoamp.com *.wandzapi.com *.yahoo.com *.yimg.com bat.bing.net sc-static.net service.force.com static.ads-twitter.com; connect-src 'self' hmklabs-dotcom-prod-us-west-2-templates.s3.us-west-2.amazonaws.com *.hallmark.com *.cybersource.com google.com *.google.com *.googleadservices.com *.googleservices.com *.googletagmanager.com *.gstatic.com *.smartystreets.com browser-intake-datadoghq.com edge.adobedc.net *.adobedtm.com *.onetrust.com *.adsrvr.org *.akamaihd.net *.amazon-adsystem.com *.bing.com *.browser-intake-datadoghq.com *.brsrvr.com *.contentsquare.net *.contentsquare.com *.cookielaw.org *.cquotient.com *.datadoghq-browser-agent.com *.demdex.net *.doubleclick.net *.dxpapi.com *.facebook.com *.facebook.net *.igodigital.com *.ipredictive.com *.kampyle.com *.medallia.com *.mppglobal.com *.my.salesforce-scrt.com *.my.site.com *.nmgassets.com *.omtrdc.net *.online-metrix.net *.paa-reporting-advertising.amazon *.paypal.com *.paypalobjects.com *.pinimg.com *.pinterest.com *.salesforceliveagent.com *.sc-static.net *.sitelabweb.com *.snapchat.com *.tiktok.com *.tiktokw.us *.videoamp.com *.wandzapi.com *.yahoo.com *.yimg.com bat.bing.net sc-static.net service.force.com static.ads-twitter.com us-autocomplete-pro.api.smartystreets.com s3.us-west-2.amazonaws.com *.amazon-adsystem.com render-output-lambda-access-point-011746944759.s3-object-lambda.us-west-2.amazonaws.com gs.wandzcdn.com production-main-hallmark.demandware.net; frame-ancestors 'self' https://www.rioseo.com https://ideas.hallmark.com https://production-main-hallmark.demandware.net; img-src 'self' data: *; style-src * 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self'; form-action 'self' *.cybersource.com *.facebook.com; font-src * 'unsafe-inline'; manifest-src 'self'; frame-src 'self' *.hallmark.com *.cybersource.com sitelabweb.com *.my.site.com *.vimeo.com *.online-metrix.net service.force.com *.snapchat.com *.adsrvr.org *.demdex.net *.doubleclick.net *.google.com *.googletagmanager.com *.ipredictive.com *.kampyle.com *.paypal.com *.pinterest.com *.facebook.com s.amazon-adsystem.com; media-src 'self' *.hallmark.com vimeocdn.com *.vimeocdn.com vimeo.com *.vimeo.com captions.cloud.vimeo.com; child-src *.hallmark.com blob:; worker-src *.hallmark.com blob:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=O_qm6i4w8bSdax8eTKFFBudFjD9MnL7g1IVO2bAK7.M-1767153583-1.0.1.1-JHiziWS1XRo1iFvTIN1Y3zFicFp93TJM0qsNQuzH9_Wv9tIisqh4DlWqwfhkmPdcazPcobskELp2ovLKY71hTRdbncixHpWeuVov_o.DYcYp3cLx.zacMwc8V5S4tmVD3v4dups0D2w.fyV4PSZ_YgQ1x0PtSNmpNHWQdl6bsUr2VbyjxIN7t6buuERq_RnmkCuDHZ1Q3Hh7Rt9K3Fq_NA; report-to cf-jrqdbrvbrgbnuwkn
report-to: {"endpoints":[{"url":"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=O_qm6i4w8bSdax8eTKFFBudFjD9MnL7g1IVO2bAK7.M-1767153583-1.0.1.1-JHiziWS1XRo1iFvTIN1Y3zFicFp93TJM0qsNQuzH9_Wv9tIisqh4DlWqwfhkmPdcazPcobskELp2ovLKY71hTRdbncixHpWeuVov_o.DYcYp3cLx.zacMwc8V5S4tmVD3v4dups0D2w.fyV4PSZ_YgQ1x0PtSNmpNHWQdl6bsUr2VbyjxIN7t6buuERq_RnmkCuDHZ1Q3Hh7Rt9K3Fq_NA"}],"group":"cf-jrqdbrvbrgbnuwkn","max_age":86400}
server: cloudflare
expires: Wed, 31 Dec 2025 03:59:43 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 31 Dec 2025 03:59:43 GMT
set-cookie: dwac_9213f353f13156d76f0f392cbf=iXGyJDLfoOaB0SVTLkshYUVJGB1vTScFB4s%3D|dw-only|||USD|false|US%2FCentral|true; Path=/; Secure; SameSite=None
set-cookie: cqcid=cdYE7GDBDjrDXQM5bla5WRcELX; Path=/; Secure; SameSite=None
set-cookie: cquid=||; Path=/; Secure; SameSite=None
set-cookie: sid=iXGyJDLfoOaB0SVTLkshYUVJGB1vTScFB4s; Path=/; Secure; SameSite=None
set-cookie: dwanonymous_b360e8cded3b2e5b9c3e9265551faca8=cdYE7GDBDjrDXQM5bla5WRcELX; Version=1; Comment="Demandware anonymous cookie for site Sites-hmk-onesite-Site"; Max-Age=15552000; Expires=Mon, 29 Jun 2026 03:59:43 GMT; Path=/; Secure; SameSite=None
set-cookie: __cq_dnt=0; Path=/; Secure; SameSite=None
set-cookie: dw_dnt=0; Path=/; Secure; SameSite=None
set-cookie: dwsid=5yCv-A9aYpPoZ8NAdmveACsYBcFSyOVwbj1fNpQaZABnPTqPw9WsMaC6MjHUMsP9K--BMZOPj_MVJ6q-Qkyabg==; path=/; HttpOnly; Secure; SameSite=None
set-cookie: __cf_bm=l9oGkI8_rIsGUMOTLmW1..nvihM8QIDEnHpy9yGir.w-1767153583-1.0.1.1-aWNPnX8iYsHCfEYX9pYjRrN3BMjcSxQXriMdjjss3vZjgzpkfAGJ.16t7vsIlX2f.yEEIqj48Myn.RYAd3UPj6J1kMw6OxYl16tsAzWK7e0; path=/; expires=Wed, 31-Dec-25 04:29:43 GMT; domain=.hallmark.com; HttpOnly; Secure; SameSite=None
set-cookie: _cfuvid=MQsDNtI9kMH83SNhKblWMPlLy77al6.EL03tfJNjues-1767153583263-0.0.1.1-604800000; path=/; domain=.hallmark.com; HttpOnly; Secure; SameSite=None
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.92a02417.1767153583.78c48f3a