hallmark.com

Live preview

This site sends "X-Frame-Options: SAMEORIGIN", which blocks embedding it here.

Since hallmark.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html;charset=UTF-8

Cache-Control

max-age=0, no-cache, no-store

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self' 'unsafe-inline' 'unsafe-eval'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.cloudfront.net *.redditstatic.com static.cloudflareinsights.com ipv4.pdscrb.com cdn.cookielaw.org gs.nmgassets.com gs.wandzcdn.com assets.adobedtm.com *.bloomreach.com *.hallmark.com *.cybersource.com google.com *.google.com *.googleadservices.com *.googleservices.com *.googletagmanager.com *.gstatic.com *.smartystreets.com browser-intake-datadoghq.com edge.adobedc.net *.adobedtm.com *.onetrust.com *.adsrvr.org *.akamaihd.net *.amazon-adsystem.com *.bing.com *.browser-intake-datadoghq.com *.brsrvr.com *.contentsquare.net *.contentsquare.com *.cookielaw.org *.cquotient.com *.datadoghq-browser-agent.com *.demdex.net *.doubleclick.net *.dxpapi.com *.facebook.com *.facebook.net *.igodigital.com *.ipredictive.com *.kampyle.com *.medallia.com *.mppglobal.com *.my.salesforce-scrt.com *.my.site.com *.nmgassets.com *.omtrdc.net *.online-metrix.net *.paa-reporting-advertising.amazon *.paypal.com *.paypalobjects.com *.pinimg.com *.pinterest.com *.salesforceliveagent.com *.sc-static.net *.sitelabweb.com *.snapchat.com *.tiktok.com *.tiktokw.us *.videoamp.com *.wandzapi.com *.yahoo.com *.yimg.com bat.bing.net sc-static.net service.force.com static.ads-twitter.com gs.wandzcdn.com https://www.youtube.com https://www.youtube-nocookie.com; connect-src 'self' *.cloudfront.net *.redditstatic.com static.cloudflareinsights.com ipv4.pdscrb.com cfs.wandzapi.com *.g.doubleclick.net hmklabs-dotcom-prod-us-west-2-templates.s3.us-west-2.amazonaws.com *.bloomreach.com *.hallmark.com *.cybersource.com google.com *.google.com *.googleadservices.com *.googleservices.com *.googletagmanager.com *.gstatic.com *.smartystreets.com browser-intake-datadoghq.com edge.adobedc.net *.adobedtm.com *.onetrust.com *.adsrvr.org *.akamaihd.net *.amazon-adsystem.com *.bing.com *.browser-intake-datadoghq.com *.brsrvr.com *.contentsquare.net *.contentsquare.com *.cookielaw.org *.cquotient.com *.datadoghq-browser-agent.com *.demdex.net *.doubleclick.net *.dxpapi.com *.facebook.com *.facebook.net *.igodigital.com *.ipredictive.com *.kampyle.com *.medallia.com *.mppglobal.com *.my.salesforce-scrt.com *.my.site.com *.nmgassets.com *.omtrdc.net *.online-metrix.net *.paa-reporting-advertising.amazon *.paypal.com *.paypalobjects.com *.pinimg.com *.pinterest.com *.salesforceliveagent.com *.sc-static.net *.sitelabweb.com *.snapchat.com *.tiktok.com *.tiktokw.us *.videoamp.com *.wandzapi.com *.yahoo.com *.yimg.com bat.bing.net sc-static.net service.force.com static.ads-twitter.com gs.wandzcdn.com us-autocomplete-pro.api.smartystreets.com s3.us-west-2.amazonaws.com *.amazon-adsystem.com render-output-lambda-access-point-011746944759.s3-object-lambda.us-west-2.amazonaws.com production-main-hallmark.demandware.net; frame-ancestors 'self' https://www.rioseo.com https://ideas.hallmark.com https://production-main-hallmark.demandware.net; img-src 'self' data: blob: *; style-src * 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self'; form-action 'self' *.cybersource.com *.facebook.com; font-src data: * 'unsafe-inline'; manifest-src 'self'; frame-src 'self' *.hallmark.com *.cybersource.com sitelabweb.com *.my.site.com *.vimeo.com *.online-metrix.net service.force.com *.snapchat.com *.adsrvr.org *.demdex.net *.doubleclick.net *.google.com *.googletagmanager.com *.ipredictive.com *.kampyle.com *.paypal.com *.pinterest.com *.facebook.com s.amazon-adsystem.com https://www.youtube.com https://www.youtube-nocookie.com; media-src 'self' *.hallmark.com vimeocdn.com *.vimeocdn.com vimeo.com *.vimeo.com captions.cloud.vimeo.com; child-src *.hallmark.com blob:; worker-src *.hallmark.com gs.wandzcdn.com blob:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6X4nNHou2LkL0ekNRFzz6BkplR2P_tusP5yJuK6ZZTw-1792566943.3824065-1.0.1.1-l7aV3p4Hhikh_aDHJ_i2ivd7Ir6T_g_IdigCixs.FWpLrzPvDHReW9O2aiH5Kj3YkxUhntMirzyi_WGoP.7DVqZDC_RvogsW_2bRy1AB3Ga94QpowHHWZlrTFzBtHbtt8TvDXknHaIjZkYexCpSYI9FyW8vEVmZOM_Yf2cBn13IMTqys7grBcbIvARkh6ldAneR3gtuphlNC3s0979dT7Q; report-to cf-rkdkyyyzvibhuitd

Strict-Transport-Security

max-age=31536000; includeSubDomains

X-Frame-Options

SAMEORIGIN

X-Content-Type-Options

nosniff

Referrer-Policy

Not sent

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://hallmark.com/HTTP 301

   → https://www.hallmark.com/

2. 2.https://www.hallmark.com/HTTP 200

Meta tags

Title

Hallmark Greeting Cards, Gifts, Ornaments, Home Decor & Gift Wrap | Hallmark

Description

Shop Hallmark for the biggest selection of greeting cards, Christmas ornaments, gift wrap, home decor and gift ideas to celebrate holidays, birthdays, weddings and more.

Canonical

https://www.hallmark.com/

Robots

index,follow

Generator

Not set

Open Graph title

Hallmark Greeting Cards, Gifts, Ornaments, Home Decor & Gift Wrap | Hallmark

Open Graph description

Shop Hallmark for the biggest selection of greeting cards, Christmas ornaments, gift wrap, home decor and gift ideas to celebrate holidays, birthdays, weddings and more.

Open Graph image

https://www.hallmark.com/on/demandware.static/-/Sites-hmk-onesite-Library/default/dwc6deae61/images/open-graph/hallmark-general-og.png

Open Graph type

website

Twitter card

Not set

Twitter title

Not set

Twitter image

Not set

robots.txt

Disallow rules (User-agent: *)

52

Disallow rules (other agents)

1

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

Related domains