urlquery.net
WEBSITE ANALYSIS REPORT

http://canarm.ca

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…
Domain graph details

Hostnames

Connections

  • canarm.ca → www.canarm.comRedirects to1 captured connections
  • loader.wisepops.com → wisepops.netRedirects to1 captured connections
  • www.canarm.com → canarmcom.mpeasylink.comEmbeds2 captured connections
  • www.canarm.com → canarmcom.mpeasylink.comLoads from4 captured connections
  • www.canarm.com → loader.wisepops.comLoads from1 captured connections
  • www.canarm.com → www.google.comCalls2 captured connections
  • www.canarm.com → www.google.noLoads from1 captured connections
  • www.canarm.com → www.googletagmanager.comLoads from3 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET301document0 B172 ms—
GET200document58.0 KB121 ms—
GET200stylesheet2.8 KB35 ms—
GET200stylesheet1.1 KB44 ms—
GET200stylesheet70.6 KB32 ms—
GET200stylesheet1.5 KB27 ms—
GET200stylesheet1.31 MB27 ms—
GET200stylesheet419 B26 ms—
GET200stylesheet25.2 KB24 ms—
GET200stylesheet36.5 KB23 ms—
GET200stylesheet30.3 KB23 ms—
GET200stylesheet2.6 KB20 ms—
GET200stylesheet19.7 KB18 ms—
GET200stylesheet1.7 KB18 ms—
GET200stylesheet8.2 KB15 ms—
GET200stylesheet5.4 KB47 ms—
GET200stylesheet935.8 KB21 ms—
GET200stylesheet34.3 KB20 ms—
GET200stylesheet9.5 KB58 ms—
GET200script84.8 KB21 ms—
GET200script7.7 KB23 ms—
GET200script62.9 KB21 ms—
GET200script3.0 KB17 ms—
GET200font3.2 KB36 ms—
GET200font70.2 KB13 ms—
GET200script1.9 KB200 ms—
GET200script1.9 KB18 ms—
GET200script30 B474 ms—

Transaction #132

Request / response

URL

GET HTTPS
https://www.canarm.com/livechat/getvisitor/

IP / ASN

United States 151.101.3.52

AS54113 · FASTLY

United States
Requested by
https://www.canarm.com/

HTTP headers

Request headers

GET /livechat/getvisitor/ HTTP/1.1
Host: www.canarm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://www.canarm.com/
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
content-security-policy-report-only: worker-src blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com data: *.kxcdn.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com www.apptrian.com scontent.cdninstagram.com *.kxcdn.com *.twitter.com google.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.files-text.com *.livechatinc.com *.livechat-files.com *.livechat-static.com magefan.com cm.magefan.com *.disqus.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com sce.toogoerp.net sce.toogo.io sce-test.toogoerp.net *.livechatinc.com *.livechat-static.com *.disqus.com 'self' data: https://ajax.googleapis.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com google.com *.kxcdn.com *.gstatic.com assets.braintreegateway.com *.livechatinc.com *.fontawesome.com 'self' 'unsafe-inline'; object-src *.livechatinc.com 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com *.livechatinc.com *.livechat-static.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com www.apptrian.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.livechatinc.com *.text.com 'unsafe-inline' data: 'unsafe-inline' blob: 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com *.livechatinc.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint;
expires: Fri, 17 Oct 2025 00:34:23 GMT
accept-ranges: bytes
report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"http:\/\/csp-reporting-service.com\/my-project\/endpoint"}]}
referrer-policy: same-origin
x-xss-protection: 1; mode=block, 1
pragma: no-cache
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-timer: S1792197264.579258,VS0,VE73
x-trace: 00-954f51716b2cc77fdcf16328791da60e-f4820e5101aa1463-00
set-cookie: PHPSESSID=bkfejf6sk1pou97hd34gc323db; expires=Sat, 17 Oct 2026 01:34:23 GMT; Max-Age=3600; path=/; domain=www.canarm.com; secure; HttpOnly; SameSite=Lax
X-Magento-Vary=dbcafcd3278ac843be61a9065834474994238a53b338a6522286bc6386680ad0; expires=Sat, 17 Oct 2026 01:34:23 GMT; Max-Age=3600; path=/; secure; HttpOnly; SameSite=Lax
cache-control: max-age=0, must-revalidate, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-robots-tag: index,follow
date: Sat, 17 Oct 2026 00:34:23 GMT
x-served-by: cache-chi-kigq8000154-CHI, cache-chi-kigq8000154-CHI, cache-chi-kigq8000154-CHI, cache-bma-essb1270066-BMA
x-cache: MISS, MISS, MISS
x-cache-hits: 0, 0, 0
vary: Accept-Encoding
strict-transport-security: max-age=300
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

GETNo responsescript0 B0 ms—
GET200img7.5 KB22 ms—
GET200img7.5 KB11 ms—
GET200img10.6 KB1321 ms—
GET200img75.9 KB13 ms—
GET200img155.1 KB20 ms—
GET200img110.2 KB13 ms—
GET200img97.7 KB13 ms—
GET200img185.0 KB1321 ms—
GET200img135.2 KB14 ms—
GET200script563.7 KB207 ms—
GET200img95 B332 ms—
GET200font70.2 KB58 ms—
GET206media18.46 MB1556 ms—
GET206media18.37 MB2604 ms—
GET200script386.7 KB48 ms—
GET200script1.8 KB47 ms—
GET200script11.9 KB98 ms—
GET200script460 B26 ms—
GET200script373 B15 ms—
GET200script2.6 KB15 ms—
GET200script213 B32 ms—
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot