HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Content-Length: 18528
Connection: keep-alive
Vary: Accept-Encoding
Date: Fri, 07 Jun 2019 10:52:53 GMT
Server: nginx
Status: 200 OK
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
Content-Security-Policy: default-src 'self' *.bpmtrk.com *.cloudfront.net cloudsponge.com ecards-us-west-2.s3.amazonaws.com *.googleapis.com *.hallmarkecards.com hallmarkecards.com hallmarklabs.net *.hallmarklife.com hallmarklife.com inttrax.com pxlvlt2.com rlcdn.com *.securepaths.com *.vindicia.com; base-uri 'self'; block-all-mixed-content; connect-src 'self' adnxs.com *.hallmarkecards.com np-securepaypage-litle.com *.optimizely.com prerender.io retargeting.inner-activ.mobi sailthru.com trksontrks.com *.walkme.com *.xg4ken.com *.zdassets.com *.zendesk.com wss://*.zopim.com; font-src 'self' *.cloudfront.net fonts.gstatic.com *.zopim.com/widget/fonts/ data:; form-action 'self' www.facebook.com *.vindicia.com; frame-ancestors 'self' *.hallmarkecards.com; frame-src 'self' *.addthis.com *.adlegend.com *.atdmt.com cafetrack.com *.dotomi.com *.doubleclick.net *.emjcd.com *.facebook.com *.go2cloud.org *.hallmarkecards.com *.pxlvlt2.com *.rfihub.com *.securepaths.com securepaths.com *.topguruoffers.com trksontrks.com *.twitter.com *.walkme.com; img-src 'self' *.adlegend.com *.adnxs.com *.amazonaws.com *.bing.com *.cloudfront.net *.doubleclick.net *.facebook.com *.facebook.net *.googleadservices.com *.googletagmanager.com *.google.com *.hallmarkecards.com *.liadm.com match.adsrvr.org pixel.pmgmads.com pixel.pmmapads.com pixel.pmgzads.com pixel.pmqzads.com pixel.tapad.com pxl.pmprotads.com *.propelmedia.com *.rfihub.com *.sailthru.com secure.cmptch.com tapjoy.go2cloud.com tapjoy.go2cloud.org *.trksontrks.com *.xg4ken.com *.yahoo.com *.zopim.com blob:; manifest-src 'self'; media-src 'self' *.cloudfront.net ecards-us-west-2.s3.amazonaws.com; object-src 'none'; plugin-types application/x-shockwave-flash; script-src 'self' 'unsafe-eval' 'unsafe-inline' secure.adnxs.com browser-update.org cdnjs.cloudflare.com/ajax/libs/jQuery-rwdImageMaps/ cdnjs.cloudflare.com/ajax/libs/ramda/ *.cloudfront.net/Analytics/ dpm.demdex.net *.doubleclick.net/pagead/viewthroughconversion/1037803774/ *.doubleclick.net/pagead/viewthroughconversion/820618379/ stats.g.doubleclick.net *.facebook.net *.googleadservices.com/pagead/conversion.js *.googleadservices.com/pagead/conversion/1037803774/ *.googleadservices.com/pagead/conversion/820618379/ *.googleadservices.com/pagead/conversion_async.js ajax.googleapis.com/ajax/libs/webfont/ *.googletagmanager.com/gtag/ *.hallmarkecards.com inttrax.com *.optimizely.com platform.twitter.com *.sail-horizon.com *.sailthru.com *.securepaths.com cdn.walkme.com/player/ cdn.walkme.com/users/05dfb6c08aed4b1a9cb6acf23c849f98/ *.xg4ken.com static.zdassets.com *.zendesk.com *.zopim.com; style-src 'self' 'unsafe-inline' *.cloudfront.net fonts.googleapis.com; upgrade-insecure-requests; worker-src 'self'; report-uri https://api.hallmarkecards.com/csp_reports
Set-Cookie: rack.session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiRWI4MTZiY2VjODZlZmQxMmY5YmJi%0AMGIwMWY5Y2NhYWIzZWQyNTk3NjQzNjdhMmNjZDA4MDI0NTY5ZjVkMGM5ZjQG%0AOwBGSSIPY3NyZi50b2tlbgY7AFRJIjFZNldxalVLWXdzajhOZDVpVXpsK2dE%0AcjZVVWtyOHB5L2ppTS9iL2czU1FNPQY7AEY%3D%0A--27deeb9062eb7d21651677952d1d9ec297139abf; path=/; HttpOnly
X-Cache: Miss from cloudfront
Via: 1.1 59b18e94cdbd74e6e6557d7131e02ebd.cloudfront.net (CloudFront)
X-Amz-Cf-Id: vj3xGKjTDxmYpq7ykFDYkocXnlQCJBSYnM5dCJUXfJ5MV8XGfbZBPg==