English

__hssrc

ttcsid_BT77L7OQGATGFK2VB8GG

__hssc

ttcsid

_pin_unauth

_ttp

_tt_enable_cookie

CMSCurrentTheme

hubspotutk

_fbp

_ga_FN5PKJ1LZL

__hstc

ASP.NET_SessionId

CMSPreferredCulture

CMSCsrfCookie

OptanonConsent

_gcl_au

You're looking at domain 'www.cookiedelivery.com' on the commercial generic top-level domain (.com) with subdomain 'www'. Count 14 characters in 'cookiedelivery' with seven vowels and 7 consonants. Tokenizing the label suggests 2 words: cookie, delivery. Median word length is seven characters. 'cookie' is most common in Sinhala usage. You may catch it in English and Chinese (Pinyin) as well.

html/c3/d9/c3d95366-e733-47a0-9e0e-7ad966ecd349_fallback.html.gz

Same-Day Cookie Delivery: Warm, Fresh Baked | Tiff's Treats

__CMSCsrfToken

__EVENTTARGET

__EVENTARGUMENT

__VIEWSTATE

__VIEWSTATEGENERATOR

__SCROLLPOSITIONX

__SCROLLPOSITIONY

p$lt$zoneContent$cd_citySelectorModal$storeLocation

email

p$lt$zoneFooter$MainModalHtml$widget1$ctl00$viewBiz$FirstName$txtText

p$lt$zoneFooter$MainModalHtml$widget1$ctl00$viewBiz$LastName$txtText

p$lt$zoneFooter$MainModalHtml$widget1$ctl00$viewBiz$Email$txtEmailInput

p$lt$zoneFooter$MainModalHtml$widget1$ctl00$viewBiz$City$dropDownList

p$lt$zoneFooter$MainModalHtml$widget1$ctl00$viewBiz$btnOK

html/c3/d9/c3d95366-e733-47a0-9e0e-7ad966ecd349.html.gz

attachment; filename="cookiedelivery.css"

inline; filename="Google-Play-button.png"

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/geo-tactile

default-src 'self' blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;script-src 'nonce-pGDVQ9VF' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self';style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com;font-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;img-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;media-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;child-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;frame-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;manifest-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;object-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;worker-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script';

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:102:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgtc:45:0

default-src 'self' blob: *;script-src 'nonce-h0SmwZxm' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self' https://*.google-analytics.com *.google.com;style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com https://*.google-analytics.com;font-src 'self' data: blob: *;img-src 'self' data: blob: * https://*.google-analytics.com;media-src 'self' data: blob: *;child-src 'self' data: blob: *;frame-src 'self' data: blob: *;manifest-src 'self' data: blob: *;object-src 'self' data: blob: *;worker-src 'self' data: blob: *;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';

frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=adsscriptloaderstatic/static-1.2605/bundles/pixels-release.js&cfRay=992a6578fc028b9b-IAD

frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=web-interactives-embed/static-2.4703/bundles/project.js&cfRay=992fb2415e56dc95-FRA

sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic

default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'nonce-EWMqZDGm' blob: 'self' connect.facebook.net 'wasm-unsafe-eval' https://*.google-analytics.com *.google.com;style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline' https://fonts.googleapis.com;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com https://*.google-analytics.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com https://fonts.gstatic.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com *.tenor.co *.tenor.com *.giphy.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.google-analytics.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data: *.tenor.co *.tenor.com https://*.giphy.com;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://td.doubleclick.net *.google.com *.doubleclick.net;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;

default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'nonce-J38L0Vv8' blob: 'self' connect.facebook.net 'wasm-unsafe-eval' https://*.google-analytics.com *.google.com;style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline' https://fonts.googleapis.com;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com https://*.google-analytics.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com https://fonts.gstatic.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com *.tenor.co *.tenor.com *.giphy.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.google-analytics.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data: *.tenor.co *.tenor.com https://*.giphy.com;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://td.doubleclick.net *.google.com *.doubleclick.net;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;

Indulge in delicious, fresh baked cookies anytime! Order online for same day delivery. Tiff's Treats cookies make the sweetest gift!

description

viewport

apple-itunes-app

google-play-app

A7JYkbIvWKmS8mWYjXO12SIIsfPdI7twY91Y3LWOV/YbZmN1ZhYv8O+Zs6/IPCfBE99aV9tIC8sWZSCN09vf7gkAAACWeyJvcmlnaW4iOiJodHRwczovL2N0LnBpbnRlcmVzdC5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

Network Solutions, LLC

COOKIEDELIVERY.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZON-CF


  window.intercomSettings = {
    api_base: "https://api-iam.intercom.io",
    app_id: "qo7anp3r",
    background_color: "#3697a7",
    action_color: "#2a318a"
  };



// We pre-filled your app ID in the widget URL: 'https://widget.intercom.io/widget/qo7anp3r'
(function(){var w=window;var ic=w.Intercom;if(typeof ic==="function"){ic('reattach_activator');ic('update'

(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.sr


	//<![CDATA[
function setCookie(cname, cvalue, exdays) {
    document.cookie = cname + "=; path=/; expires=Thu, 01 Jan 1970 00:00:00 UTC";
    var d = new Date();
    d.setTime(d.getTime() + (exdays 


//<![CDATA[
var theForm = document.forms['form'];
if (!theForm) {
    theForm = document.form;
}
function __doPostBack(eventTarget, eventArgument) {
    if (!theForm.onsubmit || (theForm.onsubmit() !


	//<![CDATA[

function PM_Postback(param) { if (window.top.HideScreenLockWarningAndSync) { window.top.HideScreenLockWarningAndSync(1080); } if(window.CMSContentManager) { CMSContentManager.allowSubmi


	//<![CDATA[

var CMS = CMS || {};
CMS.Application = {
  "language": "en",
  "imagesUrl": "/CMSPages/GetResource.ashx?image=%5bImages.zip%5d%2f",
  "isDebuggingEnabled": false,
  "applicationUrl": "/


//<![CDATA[
function WebForm_OnSubmit() {
if (typeof(ValidatorOnSubmit) == "function" && ValidatorOnSubmit() == false) return false;
return true;
}
//]]>



//<![CDATA[
Sys.WebForms.PageRequestManager._initialize('manScript', 'form', ['tctxM','','tp$lt$zoneFooter$MainModalHtml$widget1$ctl00$viewBiz$pM$pMP',''], [], [], 90, '');
//]]>



          if (window.location.href.includes("OnlineOrdering")) {
               document.getElementById("floating-button-header").style.display = "none";
          }
          


  let slides = document.querySelectorAll(".jumbotron-background-img");
  let mobileImage;
  let desktopImage;
  let viewport;
  
  if(window.innerWidth > 992) {
      viewport = "desktop";
      swap


	//<![CDATA[
var tiffs = {
	init:function() {
		tiffs.initSlider();
                tiffs.resizeHandler();
		tiffs.mobileNavCheck();
		tiffs.headerScrollCheck();
		tiffs.getURLLocParameter();
		tiffs


var queryValues = {};

$.each(window.location.href.split('?').pop().split('&'), function (i, v)
{
    var v = v.split('=');

    if(v.length >= 1) // prevent v[1] from erroring if no querystring pres


//HOVER OVER TEXT AREA, ROTATOR NAV, ROTATOR ARROWS
if ($("#heroSlider").find(".jumbotron").length > 0) {
  let rotateSpeed = 5000;
  let rotateSlide = function() { if ($( window ).width() >= 1024) {


        
//Models        
class DataTransferObject {
    profile = new Profile();
    coupon = new Coupon();
    utmInitial = new UTM();
    utm = new UTM();
}

class Profile {
    firstName;
    exp


window.mobileCheck = function() {
  let check = false;
  (function(a){if(/(android|bb\d+|meego).+mobile|avantgo|bada\/|blackberry|blazer|compal|elaine|fennec|hiptop|iemobile|ip(hone|od)|iris|kindle|l


  $('.dropdown-menu').each(function() {
    if($(this).children().length > 10 && $(window).height() < 1200) {
      $(this).addClass('scroll');
    }
  });



//<![CDATA[
var Page_Validators =  new Array(document.getElementById("p_lt_zoneFooter_MainModalHtml_widget1_ctl00_viewBiz_Email_revEmailValid"));
//]]>



//<![CDATA[
var p_lt_zoneFooter_MainModalHtml_widget1_ctl00_viewBiz_Email_revEmailValid = document.all ? document.all["p_lt_zoneFooter_MainModalHtml_widget1_ctl00_viewBiz_Email_revEmailValid"] : docu


//<![CDATA[

var callBackFrameUrl='/WebResource.axd?d=beToSAE3vdsL1QUQUxjWdRcVYpX1zXEWwHDmJfOiAGoCjGE52KHqX8CMhdRjrNLhuBywI-IZwQR9cCEYDQxw8w2&t=638901356248157332';
WebForm_InitCallback();//]]>



//<![CDATA[

var Page_ValidationActive = false;
if (typeof(ValidatorOnLoad) == "function") {
    ValidatorOnLoad();
}

function ValidatorOnSubmit() {
    if (Page_ValidationActive) {
        return V

!function(b){if(!window.pintrk){window.pintrk=function(){window.pintrk.queue.push(Array.prototype.slice.call(arguments))};var a=window.pintrk;a.queue=[];a.version="3.0";a=document.createElement("scrip

window.addEventListener("message",function(a){"hsFormCallback"===a.data.type&&"onFormSubmitted"===a.data.eventName&&"8822ab67-79a7-4a8a-8641-2ae889bda1ee"===a.data.id&&window.dataLayer.push({event:"hu

!function(d,g,e){d.TiktokAnalyticsObject=e;var a=d[e]=d[e]||[];a.methods="page track identify instances debug on off once ready alias group enableCookie disableCookie".split(" ");a.setAndDefer=functio

var elements=[];elements.push(document.getElementById("slick-slide00").getElementsByClassName("cta")[0]);elements.push(document.getElementById("slick-slide01").getElementsByClassName("cta")[0]);elemen

!function(){var e='(function(){try {window.mntn = {is_viewable_verified_visit:\'false\', is_cross_device:\'false\', creative_group_id:\'\', creative_group_name:\'\', impression_epoch_micros:\'\', visi

(function(){try {window.mntn = {is_viewable_verified_visit:'false', is_cross_device:'false', creative_group_id:'', creative_group_name:'', impression_epoch_micros:'', visit_tracking:''};} catch (e) {}

(function(a,c,e,k,b){a[b]=a[b]||[];a[b].push({projectId:"10000",properties:{pixelId:"10203733",he:"\x3cemail_address\x3e",hph:"\x3cphone_number\x3e"}});var d=c.createElement(e);d.src=k;d.async=!0;d.on

Requests	IP Address	Location	AS Autonomous System
148	3.160.150.105	United States	AS16509AMAZON-02
41	13.85.24.147	San Antonio, Texas, United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
11	104.18.86.42	United States	AS13335CLOUDFLARENET
9	23.36.162.7	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
8	13.32.99.41	New York, New York, United States	AS16509AMAZON-02
6	3.160.150.62	United States	AS16509AMAZON-02
6	142.250.186.106	United States	AS15169GOOGLE
6	3.160.156.21	United States	AS16509AMAZON-02
4	34.49.192.216	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
4	104.18.34.21	United States	AS13335CLOUDFLARENET
148	167	-	-

Security Scan Report: www.cookiedelivery.com

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies14

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History