cariboucoffee.com

3 evidence signals

HTML<link rel="manifest" href="https://www.cariboucoffee.com/wp-content

HTML<link rel="manifest" href="https://www.cariboucoffee.com/wp-content/

Meta Tag<meta name="WordPress(?: ([\d.]+))?\;version:\1" content="WordPress 6.9.4">

WooCommercev2.20.2

Ecommerce

10 evidence signals

Script

https://www.cariboucoffee.com/wp-content/plugins/woocommerce-google-analytics-integration/assets/js/build/main.js?ver=51ef67570ab7d58329f5

Script

https://www.cariboucoffee.com/wp-content/plugins/self-service-dashboard-for-woocommerce-subscriptions/functions/assets/js/front-end.js?ver=3.3.0

Script

https://www.cariboucoffee.com/wp-content/plugins/self-service-dashboard-for-woocommerce-subscriptions/functions/add-coupons/assets/js/ssd-coupons.js?ver=6.9.4

Script

https://www.cariboucoffee.com/wp-content/plugins/woocommerce-avatax/assets/js/frontend/wc-avatax-frontend.min.js?ver=3.7.1

Scripthttps://www.cariboucoffee.com/wp-content/themes/takeoff/assets/js/woocommerce.js?ver=2.20.2

stylesheet

https://www.cariboucoffee.com/wp-content/plugins/woocommerce-back-in-stock-notifications/assets/css/frontend/woocommerce.css?ver=3.3.3

stylesheet

https://www.cariboucoffee.com/wp-content/plugins/self-service-dashboard-for-woocommerce-subscriptions/functions/assets/css/frontend.css?ver=3.3.0

stylesheet

https://www.cariboucoffee.com/wp-content/plugins/woocommerce-avatax/assets/css/frontend/wc-avatax-frontend.min.css?ver=3.7.1

stylesheet

https://www.cariboucoffee.com/wp-content/plugins/woocommerce-gateway-stripe/build/upe-blocks.css?ver=22f4dbe653d393134010

WordPress Block Editor

Page builders

1 evidence signal

HTML<div class="wp-block-

Analytics & Marketing13

Google Tag Manager

Tag managers

3 evidence signals

HTMLgoogletagmanager.com/gtm.js

JS Globalgoogle_tag_manager → object

JS GlobaldataLayer → object

Google Analytics

6 evidence signals

Cookie_ga

Scripthttps://www.googletagmanager.com/gtag/js?id=AW-16883039338&cx=c&gtm=4e64t1

Scripthttps://www.googletagmanager.com/gtag/js?id=G-2EGE0563SC&cx=c&gtm=4e64t1

Scripthttps://www.googletagmanager.com/gtag/js?id=DC-13793362&cx=c&gtm=4e64t1

Scripthttps://www.googletagmanager.com/gtag/js?id=G-2EGE0563SC

JS Globalgtag → function

Facebook Pixelv2.9.313

3 evidence signals

Script

https://connect.facebook.net/signals/config/847558696886549?v=2.9.313&r=stable&domain=www.cariboucoffee.com&hme=97937018cefade17726f0472876fc101316b2ce9008a35a6a5a7977d7436151a&ex_m=104%2C205%2C154%2C22%2C72%2C73%2C145%2C68%2C67%2C11%2C162%2C90%2C16%2C138%2C48%2C146%2C77%2C112%2C47%2C127%2C39%2C75%2C78%2C134%2C159%2C164%2C8%2C4%2C5%2C7%2C6%2C3%2C91%2C101%2C165%2C170%2C219%2C62%2C186%2C187%2C55%2C276%2C30%2C74%2C231%2C230%2C229%2C23%2C33%2C103%2C61%2C10%2C63%2C97%2C98%2C99%2C105%2C130%2C31%2C29%2C132%2C133%2C129%2C128%2C155%2C76%2C158%2C156%2C157%2C50%2C60%2C123%2C15%2C161%2C45%2C263%2C264%2C262%2C26%2C27%2C28%2C18%2C20%2C44%2C40%2C42%2C41%2C83%2C92%2C96%2C110%2C144%2C147%2C46%2C111%2C24%2C21%2C119%2C69%2C36%2C149%2C148%2C150%2C141%2C139%2C25%2C35%2C59%2C109%2C160%2C70%2C17%2C152%2C114%2C81%2C66%2C19%2C85%2C86%2C116%2C84%2C136%2C135%2C34%2C278%2C293%2C212%2C201%2C202%2C200%2C296%2C288%2C52%2C213%2C107%2C131%2C80%2C121%2C54%2C49%2C113%2C120%2C126%2C58%2C64%2C151%2C115%2C37%2C32%2C53%2C56%2C100%2C163%2C1%2C124%2C14%2C122%2C12%2C2%2C57%2C93%2C65%2C118%2C89%2C88%2C166%2C167%2C94%2C95%2C9%2C125%2C102%2C51%2C142%2C87%2C79%2C71%2C117%2C106%2C43%2C143%2C0%2C82%2C137%2C140%2C153%2C38%2C108%2C13%2C168

Scripthttps://connect.facebook.net/en_US/fbevents.js

JS Global_fbq → function(v2.9.313)

theTradeDesk

Advertising

3 evidence signals

Scripthttps://js.adsrvr.org/up_loader.1.1.0.js

JS GlobalTTDUniversalPixelApi → function

JS Globalttd_dom_ready → function

Klaviyo

Marketing automation

1 evidence signal

dnsDKIM selector: kl

MailChimp

Marketing automation

1 evidence signal

dnsDKIM selector: k2

Microsoft 365

Cloudflare Browser Insights

1 evidence signal

dnsMX: cariboucoffee-com.mail.protection.outlook.com

1 evidence signal

Scripthttps://static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516

Azure Monitor

1 evidence signal

Header

js\.monitor\.azure\.com: default-src 'self'; script-src 'report-sample' 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://*.coffeeandbagels-static.com https://*.cariboucoffee.com https://*.google.com https://*.googletagmanager.com https://www.recaptcha.net https://*.google-analytics.com https://www.googleadservices.com https://www.gstatic.com https://*.doubleclick.net https://*.googleapis.com https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js https://cdn.moengage.com https://device.maxmind.com https://ajax.cloudflare.com https://static.cloudflareinsights.com https://*.zdassets.com https://*.zendesk.com https://help.cariboucoffee.com https://*.zopim.com https://zendesk-eu.my.sentry.io wss://*.zendesk.com  wss://*.zopim.com https://*.userway.org https://bat.bing.com https://r.bing.com https://js-agent.newrelic.com https://*.nr-data.net https://*.stripe.com https://hcaptcha.com https://*.hcaptcha.com https://assets.pinterest.com https://widgets.pinterest.com https://s.pinimg.com https://connect.facebook.net https://graph.facebook.com https://js.facebook.com https://sc-static.net https://tr.snapchat.com https://analytics.tiktok.com https://js.adsrvr.org https://js.monitor.azure.com https://*.cdn.applicationinsights.io https://*.cdn.monitor.azure.com https://*.kampyle.com https://*.hotjar.com; style-src 'report-sample' 'self' data: blob: 'unsafe-inline' https://*.coffeeandbagels-static.com https://*.cariboucoffee.com https://tagmanager.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://accounts.google.com https://*.userway.org https://*.bing.com https://hcaptcha.com https://*.hcaptcha.com https://*.kampyle.com https://*.hotjar.com; object-src 'none'; base-uri 'self' https://md-scp.kampyle.com; child-src 'self' https://*.facebook.com https://connect.facebook.net; connect-src 'self' blob: data: https://*.caribou.network https://*.coffeeandbagels-static.com https://*.cariboucoffee.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.google-analytics.com https://*.google.com https://google.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://*.googleapis.com https://*.googlesyndication.com https://www.recaptcha.net https://*.moengage.com https://*.mmapiws.com https://cloudflareinsights.com https://*.zdassets.com https://*.zendesk.com  https://help.cariboucoffee.com https://*.zopim.com https://zendesk-eu.my.sentry.io wss://*.zendesk.com wss://*.zopim.com https://o4507427284123728.ingest.de.sentry.io https://*.userway.org https://*.bing.com wss://*.bing.com https://*.nr-data.net https://device.maxmind.com https://*.stripe.com https://hcaptcha.com https://*.hcaptcha.com https://ct.pinterest.com https://*.facebook.com https://connect.facebook.net https://tr.snapchat.com https://tr6.snapchat.com https://analytics.tiktok.com https://analytics.pangle-ads.com https://analytics-ipv6.tiktokw.us https://insight.adsrvr.org https://dc.services.visualstudio.com https://js.monitor.azure.com https://*.applicationinsights.azure.com https://*.kampyle.com https://*.medallia.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com; form-action 'self' https://cariboucoffee.cashstar.com https://*.facebook.com https://connect.facebook.net https://*.snapchat.com https://snappcm.com; font-src 'self' data: https://*.coffeeandbagels-static.com https://*.cariboucoffee.com https://fonts.gstatic.com https://accounts.google.com https://*.userway.org https://*.stripe.com https://*.hotjar.com; frame-src 'self' https://www.recaptcha.net https://*.doubleclick.net https://www.google.com https://*.googletagmanager.com https://youtube.com https://www.youtube.com https://tpc.googlesyndication.com https://accounts.google.com https://cdn.moengage.com https://*.userway.org https://sdx.microsoft.com https://*.stripe.com https://hcaptcha.com https://*.hcaptcha.com https://assets.pinterest.com https://ct.pinterest.com https://*.facebook.com https://connect.facebook.net https://*.snapchat.com https://snappcm.com https://analytics.tiktok.com https://insight.adsrvr.org https://match.adsrvr.org https://*.kampyle.com https://peets.wufoo.com/; manifest-src 'self'; media-src 'self' https://*.zdassets.com https://*.zendesk.com https://*.userway.org https://v.pinimg.com; report-uri https://6279480024bd7fae87805fda.endpoint.csper.io?v=0; worker-src 'self' blob: https://*.coffeeandbagels-static.com https://*.cariboucoffee.com; img-src https: data: blob: https://image.moengage.com https://moe-email-campaigns.s3.amazonaws.com;

Matomo Analytics

3 evidence signals

JS GlobalMatomo → object

JS GlobalPiwik → object

JS Global_paq → object

mParticle

Customer data platform

1 evidence signal

JS GlobalmParticle → object

TikTok Pixel

1 evidence signal

JS GlobalTiktokAnalyticsObject → string

Medallia

1 evidence signal

JS GlobalKAMPYLE_COMMON → object

Infrastructure & Security10

Cloudflare

CDN

3 evidence signals

Header9f5beac5ad9c2546-SJC

Headercloudflare: cloudflare

Cookie__cf_bm

Apple Sign-in

Authentication

2 evidence signals

Scripthttps://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js?ver=1.0.0

JS GlobalAppleID → object

Cloudflare DNS

PaaS

1 evidence signal

dnsNS: lilyana.ns.cloudflare.com

hCaptcha

Security

1 evidence signal

Header

(?:\.|//)hcaptcha\.com: default-src 'self'; script-src 'report-sample' 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://*.coffeeandbagels-static.com https://*.cariboucoffee.com https://*.google.com https://*.googletagmanager.com https://www.recaptcha.net https://*.google-analytics.com https://www.googleadservices.com https://www.gstatic.com https://*.doubleclick.net https://*.googleapis.com https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js https://cdn.moengage.com https://device.maxmind.com https://ajax.cloudflare.com https://static.cloudflareinsights.com https://*.zdassets.com https://*.zendesk.com https://help.cariboucoffee.com https://*.zopim.com https://zendesk-eu.my.sentry.io wss://*.zendesk.com  wss://*.zopim.com https://*.userway.org https://bat.bing.com https://r.bing.com https://js-agent.newrelic.com https://*.nr-data.net https://*.stripe.com https://hcaptcha.com https://*.hcaptcha.com https://assets.pinterest.com https://widgets.pinterest.com https://s.pinimg.com https://connect.facebook.net https://graph.facebook.com https://js.facebook.com https://sc-static.net https://tr.snapchat.com https://analytics.tiktok.com https://js.adsrvr.org https://js.monitor.azure.com https://*.cdn.applicationinsights.io https://*.cdn.monitor.azure.com https://*.kampyle.com https://*.hotjar.com; style-src 'report-sample' 'self' data: blob: 'unsafe-inline' https://*.coffeeandbagels-static.com https://*.cariboucoffee.com https://tagmanager.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://accounts.google.com https://*.userway.org https://*.bing.com https://hcaptcha.com https://*.hcaptcha.com https://*.kampyle.com https://*.hotjar.com; object-src 'none'; base-uri 'self' https://md-scp.kampyle.com; child-src 'self' https://*.facebook.com https://connect.facebook.net; connect-src 'self' blob: data: https://*.caribou.network https://*.coffeeandbagels-static.com https://*.cariboucoffee.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.google-analytics.com https://*.google.com https://google.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://*.googleapis.com https://*.googlesyndication.com https://www.recaptcha.net https://*.moengage.com https://*.mmapiws.com https://cloudflareinsights.com https://*.zdassets.com https://*.zendesk.com  https://help.cariboucoffee.com https://*.zopim.com https://zendesk-eu.my.sentry.io wss://*.zendesk.com wss://*.zopim.com https://o4507427284123728.ingest.de.sentry.io https://*.userway.org https://*.bing.com wss://*.bing.com https://*.nr-data.net https://device.maxmind.com https://*.stripe.com https://hcaptcha.com https://*.hcaptcha.com https://ct.pinterest.com https://*.facebook.com https://connect.facebook.net https://tr.snapchat.com https://tr6.snapchat.com https://analytics.tiktok.com https://analytics.pangle-ads.com https://analytics-ipv6.tiktokw.us https://insight.adsrvr.org https://dc.services.visualstudio.com https://js.monitor.azure.com https://*.applicationinsights.azure.com https://*.kampyle.com https://*.medallia.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com; form-action 'self' https://cariboucoffee.cashstar.com https://*.facebook.com https://connect.facebook.net https://*.snapchat.com https://snappcm.com; font-src 'self' data: https://*.coffeeandbagels-static.com https://*.cariboucoffee.com https://fonts.gstatic.com https://accounts.google.com https://*.userway.org https://*.stripe.com https://*.hotjar.com; frame-src 'self' https://www.recaptcha.net https://*.doubleclick.net https://www.google.com https://*.googletagmanager.com https://youtube.com https://www.youtube.com https://tpc.googlesyndication.com https://accounts.google.com https://cdn.moengage.com https://*.userway.org https://sdx.microsoft.com https://*.stripe.com https://hcaptcha.com https://*.hcaptcha.com https://assets.pinterest.com https://ct.pinterest.com https://*.facebook.com https://connect.facebook.net https://*.snapchat.com https://snappcm.com https://analytics.tiktok.com https://insight.adsrvr.org https://match.adsrvr.org https://*.kampyle.com https://peets.wufoo.com/; manifest-src 'self'; media-src 'self' https://*.zdassets.com https://*.zendesk.com https://*.userway.org https://v.pinimg.com; report-uri https://6279480024bd7fae87805fda.endpoint.csper.io?v=0; worker-src 'self' blob: https://*.coffeeandbagels-static.com https://*.cariboucoffee.com; img-src https: data: blob: https://image.moengage.com https://moe-email-campaigns.s3.amazonaws.com;

Amazon S3

CDN

1 evidence signal

Header

s3[^ ]*amazonaws\.com: default-src 'self'; script-src 'report-sample' 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://*.coffeeandbagels-static.com https://*.cariboucoffee.com https://*.google.com https://*.googletagmanager.com https://www.recaptcha.net https://*.google-analytics.com https://www.googleadservices.com https://www.gstatic.com https://*.doubleclick.net https://*.googleapis.com https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js https://cdn.moengage.com https://device.maxmind.com https://ajax.cloudflare.com https://static.cloudflareinsights.com https://*.zdassets.com https://*.zendesk.com https://help.cariboucoffee.com https://*.zopim.com https://zendesk-eu.my.sentry.io wss://*.zendesk.com  wss://*.zopim.com https://*.userway.org https://bat.bing.com https://r.bing.com https://js-agent.newrelic.com https://*.nr-data.net https://*.stripe.com https://hcaptcha.com https://*.hcaptcha.com https://assets.pinterest.com https://widgets.pinterest.com https://s.pinimg.com https://connect.facebook.net https://graph.facebook.com https://js.facebook.com https://sc-static.net https://tr.snapchat.com https://analytics.tiktok.com https://js.adsrvr.org https://js.monitor.azure.com https://*.cdn.applicationinsights.io https://*.cdn.monitor.azure.com https://*.kampyle.com https://*.hotjar.com; style-src 'report-sample' 'self' data: blob: 'unsafe-inline' https://*.coffeeandbagels-static.com https://*.cariboucoffee.com https://tagmanager.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://accounts.google.com https://*.userway.org https://*.bing.com https://hcaptcha.com https://*.hcaptcha.com https://*.kampyle.com https://*.hotjar.com; object-src 'none'; base-uri 'self' https://md-scp.kampyle.com; child-src 'self' https://*.facebook.com https://connect.facebook.net; connect-src 'self' blob: data: https://*.caribou.network https://*.coffeeandbagels-static.com https://*.cariboucoffee.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.google-analytics.com https://*.google.com https://google.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://*.googleapis.com https://*.googlesyndication.com https://www.recaptcha.net https://*.moengage.com https://*.mmapiws.com https://cloudflareinsights.com https://*.zdassets.com https://*.zendesk.com  https://help.cariboucoffee.com https://*.zopim.com https://zendesk-eu.my.sentry.io wss://*.zendesk.com wss://*.zopim.com https://o4507427284123728.ingest.de.sentry.io https://*.userway.org https://*.bing.com wss://*.bing.com https://*.nr-data.net https://device.maxmind.com https://*.stripe.com https://hcaptcha.com https://*.hcaptcha.com https://ct.pinterest.com https://*.facebook.com https://connect.facebook.net https://tr.snapchat.com https://tr6.snapchat.com https://analytics.tiktok.com https://analytics.pangle-ads.com https://analytics-ipv6.tiktokw.us https://insight.adsrvr.org https://dc.services.visualstudio.com https://js.monitor.azure.com https://*.applicationinsights.azure.com https://*.kampyle.com https://*.medallia.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com; form-action 'self' https://cariboucoffee.cashstar.com https://*.facebook.com https://connect.facebook.net https://*.snapchat.com https://snappcm.com; font-src 'self' data: https://*.coffeeandbagels-static.com https://*.cariboucoffee.com https://fonts.gstatic.com https://accounts.google.com https://*.userway.org https://*.stripe.com https://*.hotjar.com; frame-src 'self' https://www.recaptcha.net https://*.doubleclick.net https://www.google.com https://*.googletagmanager.com https://youtube.com https://www.youtube.com https://tpc.googlesyndication.com https://accounts.google.com https://cdn.moengage.com https://*.userway.org https://sdx.microsoft.com https://*.stripe.com https://hcaptcha.com https://*.hcaptcha.com https://assets.pinterest.com https://ct.pinterest.com https://*.facebook.com https://connect.facebook.net https://*.snapchat.com https://snappcm.com https://analytics.tiktok.com https://insight.adsrvr.org https://match.adsrvr.org https://*.kampyle.com https://peets.wufoo.com/; manifest-src 'self'; media-src 'self' https://*.zdassets.com https://*.zendesk.com https://*.userway.org https://v.pinimg.com; report-uri https://6279480024bd7fae87805fda.endpoint.csper.io?v=0; worker-src 'self' blob: https://*.coffeeandbagels-static.com https://*.cariboucoffee.com; img-src https: data: blob: https://image.moengage.com https://moe-email-campaigns.s3.amazonaws.com;

Google Sign-in

Authentication

Cloudflare Bot Management

1 evidence signal

Scripthttps://accounts.google.com/gsi/client

Security

1 evidence signal

Cookie__cf_bm

MaxMind

Geolocation

1 evidence signal

Scripthttps://device.maxmind.com/js/device.js

Amazon Web Services

PaaS

50%

1 evidence signal

HTMLimplied by Amazon S3

Azure

PaaS

50%

1 evidence signal

HTMLimplied by Azure Monitor

Libraries & Utilities8

Zendesk

Documentation

4 evidence signals

HTMLze-snippet

Scripthttps://static.zdassets.com/ekr/snippet.js?key=99199654-e59b-4c04-93cf-2636b2fb7d96

JS GlobalzE → function

dnsSPF includes zendesk.com

Stripe

Payment processors

2 evidence signals

Scripthttps://js.stripe.com/clover/stripe.js

JS GlobalStripe → function(vclover)

HTTP/3

Miscellaneous

1 evidence signal

Headerh3: h3=":443"; ma=86400

jQuery Migrate

JavaScript libraries

1 evidence signal

Scripthttps://www.cariboucoffee.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1

core-js

JavaScript libraries

1 evidence signal

JS Global__core-js_shared__ → object

UserWay

Accessibility

WooCommerce Stripe Payment Gateway

2 evidence signals

Scripthttps://cdn.userway.org/widget.js

Scripthttps://cdn.userway.org/widgetapp/2026-04-14-10-40-20/widget_app_base_1776163220800.js

WordPress plugins